PHP2Shell (CVE-2026-109618 and CVE-2026-109619): What It Is and How to Patch and Protect Your Servers
Two critical PHP vulnerabilities, nicknamed PHP2Shell, can allow unauthenticated remote code execution. Here is what is affected, how to patch every common setup, what to do if you cannot patch today, and how to check for compromise.
