php-cve-2026-10961x-lab-poc
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Visit website ↗ Source listing ↗
GITHUB · launched Oct 20, 2026 · 94 upvotes (top 16%)
- Security
- Dev tools
- Developer
- Not AI
- Hobby / open-source project
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
- php
- php2shell
- +4 more in the details below
Similar launches
See all 168 similar launches →Could you build this?
No This is a research-grade unauthenticated RCE proof-of-concept chaining an in-band memory disclosure with a use-after-free. It requires novel vulnerability research and exploit engineering that AI-assisted coding does not provide.
What it would actually take: A real version requires deep familiarity with PHP's session handling and the Zend engine's memory management to find the disclosure and UAF primitives. It also needs a controlled lab with pinned vulnerable and patched PHP builds for negative testing, plus an experienced exploit developer to make the chain reliable.
Competitors
Other products that read as similar to this one : 168 launches clear the similarity bar, closest 8 shown.
Attention rank: #23 of 169 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 291 days after the earliest competitor.
- cve-2026-87902-poc · github · 2026-09-22 · 31 upvotes · similarity 0.71
- php2shell-CVE-2026-109618-109619 · github · 2026-10-21 · 33 upvotes · similarity 0.71
- php2shell · github · 2026-10-21 · 40 upvotes · similarity 0.70
- php-cve-2026-109618-109619-backports · github · 2026-10-21 · 30 upvotes · similarity 0.67
- php2shell-CVE-2026-109618-CVE-2026-109619-PoC · github · 2026-10-21 · 891 upvotes · similarity 0.67
- CVE-2026-109618 · github · 2026-10-21 · 55 upvotes · similarity 0.66
- php-rce · github · 2026-10-21 · 30 upvotes · similarity 0.65
- CVE-2026-109618-php2shell-lab · github · 2026-10-21 · 23 upvotes · similarity 0.64
Other launches for this product
- No other launches for this product.
More details
- External ID
- 1427463371
- Company
- n/a
- Product
- php-cve-2026-10961x-lab-poc
- Website domain
- wiz.io
- Cohort
- n/a
- Upvotes percentile
- 0.84
- All tags
- cve-2026-109618, cve-2026-109619, exploit, memory-corruption, php, php2shell, rce, rfc1867, security-research, session-upload-progress
- AI summary
- unauthenticated rce proof of concept for php cve
- Manually corrected
- No