
PHP2Shell: what the critical PHP flaw is and how to update
CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell: two vulnerabilities in the PHP engine allow unauthenticated remote code execution and are already exploited in the wild. What they are, who is …
