AWS Reports PHP2Shell Exploit Attempt

AWS detected PHP2Shell exploit attempt four days before public disclosure.

By ·

Oct 22, 2026

3 cards · 30s · tap to begin

From · · · 30s

AWS Reports PHP2Shell Exploit Attempt

AWS detected PHP2Shell exploit attempt four days before public disclosure.

In brief

AWS detected PHP2Shell exploit attempt four days before public disclosure. AWS's MadPot honeypots observed a PHP2Shell exploit attempt on Oct 17th, four days before the vulnerability was publicly disclosed. Originally reported by RuntimeWire.

AWS MadPot Honeypot

AWS said its MadPot honeypots observed a PHP2Shell exploit attempt on Oct 17th.

Exploit Attempt Before Disclosure

The attempt occurred four days before the vulnerability was publicly disclosed.

Not Successful Compromise

Not Successful Compromise

The report describes an attempt, not evidence that a system was successfully compromised.

The bottom line

AWS's MadPot honeypots observed a PHP2Shell exploit attempt on Oct 17th, four days before the vulnerability was publicly disclosed.

Read the original on RuntimeWire

React

Sign in to react and comment.

Comments (0)

Life is short. Keep it sweet. Respect others' opinions and be kind!

    Recommended next

    More decks on aws and related topics.