Posts tagged #php

PHP2Shell: Two Critical PHP RCEs (CVSS 9.2) Leaked a Day Early — Check Your Version and Patch Today

PHP2Shell (CVE-2026-109618 + CVE-2026-109619): unauthenticated RCE on PHP 5.4–8.5. Fixed versions, the restart trap, and a compromise hunt checklist.