The insurance industry is closely monitoring the PHP2Shell vulnerabilities, which could lead to systemic cyber events and billions in claims.
The vulnerability or weakness
| CVE | CVSS | Severity | In CISA KEV | KEV due date |
|---|---|---|---|---|
| CVE-2026-109618 | 9.2 | CRITICAL | Yes, added 2026-10-26 | 2026-10-29 |
| CVE-2026-109619 | 9.2 | CRITICAL | Yes, added 2026-10-26 | 2026-10-29 |
CVE data: NVD (nvd.nist.gov) and the CISA Known Exploited Vulnerabilities catalog.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations face significant financial risk, potentially leading to billions in claims that exceed current risk models, impacting board directors and corporate officers.
Industries affected
The insurance sector, along with any business relying on PHP, is particularly affected by these vulnerabilities.
Build these skills
Watch the daily brief
Sources
- Insurance industry fears potential impacts stemming from PHP2Shell (Cybersecurity Dive)
