Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers
0 comments
- Points279
- Comments138
0 comments
Story details from Hacker News ↗ · linked article on dreamgroup.com.
Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers was first seen on Hacker News · Front page on Oct 29, 2026. Since then it has appeared in 62 checks on 2 different days. Its best position was #5 of 30, reached on Oct 29, 19:37 UTC. It dropped off the list after Oct 30, 04:07 UTC.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
Platform metric as reported by Hacker News.
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
> the attacker chained in a second exploit: a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystem Linux seems to have a huge attack surface that doesn't necessarily need to be there for every user/server. E.g. this came out today: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation [1]. I just…
> A1 — Memory Exhaustion (~383MB): I'm actually somewhat surprised at the clumsiness here. I'm a complete amateur that had DeepSeek build a PHP2Shell exploit, and once the stealmybitcoin site went up and set an upload limit, i had DeepSeek try to shrink/amplify it. DeepSeek couldn't find anything but a 2x reduction,…
I thought we were smug about how hard it was to make a working exploit for this?
Archived daily, weekly and monthly lists that include this entry.
Not at the moment. It was last on the list on Oct 30, 04:07 UTC, after 2 days of trending.
#5 on Hacker News · Front page, on Oct 29, 19:37 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Oct 29, 2026 and has been on the list on 2 days (62 checks) since.
279 points and 138 comments; submitted by 882542F3884314B on Oct 29, 2026.