Governments and cyber-security agencies worldwide are urging website operators to patch PHP2Shell, two critical PHP flaws tracked as CVE-2026-109618 and CVE-2026-109619. Found with AI, the bugs enable remote code execution and Heartbleed-style memory disclosure. A fix arrived on Wednesday afternoon.
First seen on thecyberexpress.com
Jump to article: thecyberexpress.com/php2shell-cve-2026-109618-php-flaw/
