# PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

**URL:** <https://forums.thehomestack.io/t/php2shell-exploit-attempts-hit-millions-as-attackers-try-to-deploy-mirai-malware/26579>\
**Category:** The Hacker News\
**Created:** [October 23, 2026, 7:57am UTC](https://forums.thehomestack.io/t/php2shell-exploit-attempts-hit-millions-as-attackers-try-to-deploy-mirai-malware/26579 "2026-10-23T07:57:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![robinhood1995](https://forums.thehomestack.io/letter_avatar_proxy/v4/letter/r/48db29/32.png) [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\
**Post date:** [October 23, 2026, 7:57am UTC](https://forums.thehomestack.io/t/php2shell-exploit-attempts-hit-millions-as-attackers-try-to-deploy-mirai-malware/26579/1 "2026-10-23T07:57:21Z")

</div>

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought.

The attacks aim to exploit CVE-2026-109618 and CVE-2026-109619 (CVSS scores: 9.2), which can result in unauthenticated remote

* * *
This is a companion discussion topic for the original entry at [https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html](https://thehackernews.com/2026/10/php2shell-exploit-attempts-hit-millions.html)