Cloudflare and AWS Log Millions of PHP2Shell Exploit Attempts Pre‑Disclosure

Cloudflare recorded thousands of exploitation attempts on CVE‑2026‑109618 and CVE‑2026‑109619 before public disclosure, with numbers rising to millions after the vulnerabilities were announced; Amazon noted attackers were targeting the flaws four days earlier.