9 Year-Old PHP Vulnerability Keeps Swinging As One of the Most Targeted Vulnerabilities

Reported 19 May 2026 by otx · Severity: medium

CVE-2017-9841, a remote code execution vulnerability in PHPUnit's eval-stdin.php file, remains highly exploited nearly a decade after disclosure. Analysis reveals over 80,000 exploitation attempts detected in 30 days, with 36,500 hits in the last 10 days alone. The vulnerability