PHP2Shell: Critical PHP vulnerabilities patched, update now!

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP…

Read the full story at Help Net Security ↗

Preview courtesy of Help Net Security. The full article opens on their site.

Other coverage of this story

HackRead·1h ago
PHP Releases Emergency Fixes for Critical PHP2Shell Vulnerabilities
Wired·1h ago
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The Hacker News·1h ago
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
Phoronix·2h ago
PHP Updates Released For Two Critical Code Execution Vulnerabilities
Unit 42·2h ago
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
CyberScoop·2h ago
Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

PHP2Shell: Critical PHP vulnerabilities patched, update now!

Other coverage of this story

More from Help Net Security