php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

Update October 21: Added Amazon Threat Intelligence's report of exploitation attempts beginning October 17, before public disclosure. Added Tenable Nessus plugins, including local checks for PHP packages from Linux distributions, along with guidance on using Tenable Hexa AI to find and tag PHP assets by version. Update October 21: PHP released patches and published its advisories. …