Trendoday

Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers

0 comments

  • Points279
  • Comments138
–Rank now
#5Peak rank
2Days on list
–Score · 7d
Oct 29, 2026First seen

On Hacker News

Points
279
Comments
138
Submitted by
882542F3884314B
Posted
Oct 29, 2026
Site
dreamgroup.com

Story details from Hacker News ↗ · linked article on dreamgroup.com.

Trending history

Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers was first seen on Hacker News · Front page on Oct 29, 2026. Since then it has appeared in 62 checks on 2 different days. Its best position was #5 of 30, reached on Oct 29, 19:37 UTC. It dropped off the list after Oct 30, 04:07 UTC.

Rank history

Position on Hacker News · Front page at every check (lower is better).

#1#11#20#30 12:5216:4120:2900:1804:07 Oct 29, 12:52 UTC · #29Oct 29, 13:07 UTC · #28Oct 29, 13:22 UTC · #28Oct 29, 13:37 UTC · #27Oct 29, 13:52 UTC · #26Oct 29, 14:07 UTC · #26Oct 29, 14:22 UTC · #25Oct 29, 14:37 UTC · #25Oct 29, 14:52 UTC · #24Oct 29, 15:07 UTC · #20Oct 29, 15:22 UTC · #20Oct 29, 15:37 UTC · #20Oct 29, 15:52 UTC · #20Oct 29, 16:07 UTC · #17Oct 29, 16:22 UTC · #17Oct 29, 16:37 UTC · #17Oct 29, 16:52 UTC · #14Oct 29, 17:07 UTC · #13Oct 29, 17:22 UTC · #11Oct 29, 17:37 UTC · #8Oct 29, 17:52 UTC · #9Oct 29, 18:07 UTC · #9Oct 29, 18:22 UTC · #9Oct 29, 18:37 UTC · #6Oct 29, 18:52 UTC · #7Oct 29, 19:07 UTC · #6Oct 29, 19:22 UTC · #7Oct 29, 19:37 UTC · #5Oct 29, 19:52 UTC · #5Oct 29, 20:07 UTC · #7Oct 29, 20:22 UTC · #7Oct 29, 20:37 UTC · #7Oct 29, 20:52 UTC · #7Oct 29, 21:07 UTC · #6Oct 29, 21:22 UTC · #7Oct 29, 21:37 UTC · #6Oct 29, 21:52 UTC · #6Oct 29, 22:07 UTC · #6Oct 29, 22:22 UTC · #6Oct 29, 22:37 UTC · #6Oct 29, 22:52 UTC · #7Oct 29, 23:07 UTC · #7Oct 29, 23:22 UTC · #7Oct 29, 23:37 UTC · #7Oct 29, 23:52 UTC · #7Oct 30, 00:07 UTC · #7Oct 30, 00:22 UTC · #7Oct 30, 00:37 UTC · #7Oct 30, 00:52 UTC · #8Oct 30, 01:07 UTC · #8Oct 30, 01:22 UTC · #8Oct 30, 01:37 UTC · #7Oct 30, 01:52 UTC · #7Oct 30, 02:07 UTC · #8Oct 30, 02:22 UTC · #7Oct 30, 02:37 UTC · #7Oct 30, 02:52 UTC · #7Oct 30, 03:07 UTC · #7Oct 30, 03:22 UTC · #7Oct 30, 03:37 UTC · #7Oct 30, 03:52 UTC · #7Oct 30, 04:07 UTC · #7

Last 14 days

Best rank per day (UTC).

Oct 26today

Metric history

Platform metric as reported by Hacker News.

0101202306 12:5216:4120:2900:1804:07 Oct 29, 12:52 UTC · 4Oct 29, 13:07 UTC · 9Oct 29, 13:22 UTC · 16Oct 29, 13:37 UTC · 23Oct 29, 13:52 UTC · 31Oct 29, 14:07 UTC · 37Oct 29, 14:22 UTC · 57Oct 29, 14:37 UTC · 68Oct 29, 14:52 UTC · 79Oct 29, 15:07 UTC · 87Oct 29, 15:22 UTC · 96Oct 29, 15:37 UTC · 107Oct 29, 15:52 UTC · 113Oct 29, 16:07 UTC · 116Oct 29, 16:22 UTC · 128Oct 29, 16:37 UTC · 139Oct 29, 16:52 UTC · 150Oct 29, 17:07 UTC · 158Oct 29, 17:22 UTC · 165Oct 29, 17:37 UTC · 168Oct 29, 17:52 UTC · 173Oct 29, 18:07 UTC · 178Oct 29, 18:22 UTC · 182Oct 29, 18:37 UTC · 186Oct 29, 18:52 UTC · 186Oct 29, 19:07 UTC · 190Oct 29, 19:22 UTC · 196Oct 29, 19:37 UTC · 206Oct 29, 19:52 UTC · 213Oct 29, 20:07 UTC · 216Oct 29, 20:22 UTC · 223Oct 29, 20:37 UTC · 228Oct 29, 20:52 UTC · 233Oct 29, 21:07 UTC · 239Oct 29, 21:22 UTC · 241Oct 29, 21:37 UTC · 246Oct 29, 21:52 UTC · 250Oct 29, 22:07 UTC · 252Oct 29, 22:22 UTC · 254Oct 29, 22:37 UTC · 255Oct 29, 22:52 UTC · 260Oct 29, 23:07 UTC · 262Oct 29, 23:22 UTC · 265Oct 29, 23:37 UTC · 270Oct 29, 23:52 UTC · 272Oct 30, 00:07 UTC · 272Oct 30, 00:22 UTC · 274Oct 30, 00:37 UTC · 275Oct 30, 00:52 UTC · 278Oct 30, 01:07 UTC · 280Oct 30, 01:22 UTC · 282Oct 30, 01:37 UTC · 286Oct 30, 01:52 UTC · 289Oct 30, 02:07 UTC · 291Oct 30, 02:22 UTC · 293Oct 30, 02:37 UTC · 296Oct 30, 02:52 UTC · 297Oct 30, 03:07 UTC · 297Oct 30, 03:22 UTC · 298Oct 30, 03:37 UTC · 299Oct 30, 03:52 UTC · 302Oct 30, 04:07 UTC · 306

From the discussion

A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.

> the attacker chained in a second exploit: a Linux kernel vulnerability in the XFRM ESP-in-TCP subsystem Linux seems to have a huge attack surface that doesn't necessarily need to be there for every user/server. E.g. this came out today: CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation [1]. I just…

> A1 — Memory Exhaustion (~383MB): I'm actually somewhat surprised at the clumsiness here. I'm a complete amateur that had DeepSeek build a PHP2Shell exploit, and once the stealmybitcoin site went up and set an upload limit, i had DeepSeek try to shrink/amplify it. DeepSeek couldn't find anything but a 2x reduction,…

I thought we were smug about how hard it was to make a working exploit for this?

Questions

Is Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers trending on Hacker News right now?

Not at the moment. It was last on the list on Oct 30, 04:07 UTC, after 2 days of trending.

What is the highest rank Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers reached?

#5 on Hacker News · Front page, on Oct 29, 19:37 UTC. Trendoday checks this list every 15 minutes.

How long has Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers been trending?

It was first seen on Oct 29, 2026 and has been on the list on 2 days (62 checks) since.

How much discussion did it get on Hacker News?

279 points and 138 comments; submitted by 882542F3884314B on Oct 29, 2026.