22 Oct 2026
4 min read
PHP2Shell: What You Need to Know About Two Critical PHP Vulnerabilities
PHP2Shell (CVE-2026-109618, CVE-2026-109619) enables unauthenticated RCE in PHP. See fixed versions for 8.2 to 8.5 and how to patch and verify your runtime.
