AI translation. Check versions, conditions and actions against the Japanese original and primary sources.
DAILY RECORD · 2026-10-17
10/17Learning later about attempts before disclosure.
PHP2Shell attempts preceded the advisory. Distinguish the start of an incident from the date it became publicly known.
Review as of 10/26 10:27 JST. Exact JST dates remain unconfirmed for items whose original sources provide only dates.
Attack attempts observed / learned later · Original report 10/17, time unspecified
PHP2Shell attempts began on 10/17.
AWS MadPot observed PHP2Shell-related attempts before the public advisory. These are observed attempts, not proof of successful intrusion into all PHP hosts or a victim count.
What to check In environments that exposed PHP publicly, investigate access, execution, and outbound-communication evidence back to at least 10/17, separately from updating.
A group of core kernel issues in Infinity Core was disclosed. This is not a derivative PHP incident. After code execution inside a container is obtained, it may lead to privilege escalation to the host.
What to check Check distribution fixes and verify the running kernel after restarting.