# \#php2shell

**URL:** https://community.f5.com/tag/php2shell/945.md

[Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md)

---

## [Php2shell - is BIGIP vulnerable?](https://community.f5.com/t/php2shell-is-bigip-vulnerable/77598)

<div class="topic-metadata">

**Author:** [@Marcin\_Rożek](https://community.f5.com/u/Marcin_Ro%C5%BCek)\
**Replies:** 17\
**Last updated:** [October 24, 2026, 2:24pm UTC](https://community.f5.com/t/php2shell-is-bigip-vulnerable/77598 "2026-10-24T14:24:04Z")

</div>

Hello, is BIGIP vulnerable to recent php2shell? Is this iRule good to protect services? when HTTP\_REQUEST { if { \[HTTP::method\] eq "POST" && \\ \[string tolower \[HTTP::header "Content-Type"\]\] contains "mult…

---

## [Nginx+/AppProtect](https://community.f5.com/t/nginx-appprotect/77603)

<div class="topic-metadata">

**Author:** [@CIPEO\_ISI](https://community.f5.com/u/CIPEO_ISI)\
**Replies:** 0\
**Last updated:** [October 22, 2026, 8:15am UTC](https://community.f5.com/t/nginx-appprotect/77603 "2026-10-22T08:15:52Z")

</div>

Hello, Regarding PHP2Shell signatures (supposed to be CVE-2026-109618: PHP Remote Code Execution, ID 200103697 and ID 200204115 and CVE-2026-109619: PHP Remote Code Execution, ID 200204113) they dont appear even after a…