The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/
![]()

