PHP ships emergency patches for critical PHP2Shell flaws
PHP issued urgent security updates to address two critical RCE flaws (CVE-2026-109618 and CVE-2026-109619) collectively identified as PHP2Shell. These vulnerabilities allow remote code execution and required immediate patching.
Key points
- Two critical RCE vulnerabilities in PHP
- Emergency patches released by PHP security team
- Vulnerabilities tracked as PHP2Shell
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
