PHP2Shell attackers try to deploy Potassium Mirai botnet

Attempts to turn the PHP2Shell vulnerabilities into Potassium botnet infections have not produced a confirmed compromise, despite the millions of attacks Cloudflare reported within hours of disclosure. The attackers tried to use CVE-2026-109618 and CVE-2026-109619 to install a Mirai-derived Linux botnet, but researchers have not seen the malware downloaded or executed through those attempts. PHP has fixed the flaws in versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Source

Les hele artikkelen hos kilden.