Hacker News Reader

Very weird thing for you to complain about when the writer did list multiple PoCs he tried, and here you are saying there's one that works but you won't share the link.

Which POC did you get running against a vanilla unmodified php server. Which server, which OS?

These? (copy/pasting from the article)

https://github.com/david-alvarez-rosa/php-rce https://github.com/eness/php2shell-CVE-2026-109618-CVE-2026-... https://github.com/ikow/php2shell-poc

There are two linked in the article