Cignify Threat Research

Reports from the offense.

Technical reports and research write-ups from the team that breaks things for a living: vulnerability deep-dives down to the engine code, threat intelligence on what attackers are doing with them, and detection content defenders can ship the same day.

Vulnerability Research Threat Intelligence Detection Engineering Technical Writing

Latest report

Vulnerability ResearchThreat Intelligence

PHP2Shell: One Jump From Crash to Compromise

How a decades-old shortcut in PHP's memory handling became an unauthenticated remote-code-execution class (CVE-2026-109618 and CVE-2026-109619), how attackers are using it, and what Saudi defenders should do about it.

CVE-2026-109618 CVE-2026-109619 RCE PHP
26 Oct 2026 · ~16 min read Read the report →

All reports

26 OCT 2026
Vulnerability Research

PHP2Shell: One Jump From Crash to Compromise

Root cause, exploitation, detection content and IOCs for CVE-2026-109618 / 109619.

Read →
Put the research to work

Want to know if you're exposed before an attacker does?

Talk to our team → Scan with Cignify/Web