Historical version

This is version 1, as it stood on . It is not what this organization currently publishes — read the current version.

php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

Tenable Version 1 original

Imported from official source

Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches. CVE-2026-109618 and CVE-2026-109619 are critical vulnerabilities in PHP, both rated CVSSv4.0 9.2 by the PHP security team. Public reporting describes both as remote code execution vulnerabilities. …

This version

Version
1 of 11
Recorded
October 21, 2026 10:01
Change
Initial
Content hash
653ed308a239db5244d4e847edb5b415
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.