Historical version

This is version 3, as it stood on . It is not what this organization currently publishes — read the current version.

php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

Tenable Version 3 imported change

Imported from official source

Update October 21: PHP released patches and published its advisories. This post now includes vulnerability details, fixed versions, source backports for end-of-life branches, interim mitigation guidance, updated exploitation details and Tenable product coverage and Vulnerability Watch classification. …

This version

Version
3 of 11
Recorded
October 21, 2026 20:01
Change
Imported change
Content hash
6d6d7495b44b75f74bf0f1dabfa623fa
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.