diff --git a/README.md b/README.md
index 97b039f..9f6bfd3 100644
--- a/README.md
+++ b/README.md
@@ -1161,6 +1161,7 @@
 - [PHP “php2shell”（CVE-2026-109618/109619）：从 session.upload_progress 到多条 RCE 攻击链](https://mrxn.net/jswz/php-session-upload_progress-rce-fixes-ways.html)
 - [友加畅捷管理系统标准版 UpdateWayJJD接口SQL注入漏洞](https://mrxn.net/jswz/youjiasoft-Repair-UpdateWayJJD-sqli.html)
 - [友加畅捷管理系统标准版 GetProductStorNumber接口SQL注入漏洞](https://mrxn.net/jswz/youjiasoft-Repair-GetProductStorNumber-sqli.html)
+- [CVE-2026-109618-exploit](https://github.com/junaire/CVE-2026-109618-exploit) | [php2shell-poc](https://github.com/ikow/php2shell-poc)
    
    
 ## <span id="head5"> 提权辅助相关</span>
@@ -3460,4 +3461,4 @@
 
 ### 最后，选一个屁股吧！
 
-![](https://ooo.0o0.ooo/2017/06/13/593fb9335fe9c.jpg)
\ No newline at end of file
+![](https://ooo.0o0.ooo/2017/06/13/593fb9335fe9c.jpg)