Published by Secaix at Oktober 21, 2026 The PHP security team and CISA have issued emergency patches for two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell, affecting all PHP installations serving web requests.
