PHP2Shell: PHP Patches Two Critical RCE Vulnerabilities, Urges Immediate Updates
Imported from official source
Updated: October 21, 2026 PHP has released security updates for two critical vulnerabilities that can allow unauthenticated remote code execution. Apache mod_php deployments warrant immediate attention: PHP reports a demonstrated exploit that can trigger before application code runs. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each carry a CVSS v4.0 score of 9.2. …
This version
- Version
- 2 of 4
- Recorded
- October 21, 2026 16:00
- Change
- Imported change
- Content hash
2cbcbf3951ac4869f48228f386d6555f- All versions
- Revision history