PHP2Shell: Critical PHP Vulnerabilities Put Web Servers at Immediate Risk
A pair of newly disclosed vulnerabilities in the PHP runtime has triggered an urgent global patching effort after researchers demonstrated that attackers can achieve unauthenticated remote code execution and expose sensitive server memory. On October 21, 2026, the PHP project released emergency security updates addressing CVE-2026-109618 and CVE-2026-109619, collectively referred to as PHP2Shell. Both vulnerabilities
Read More