php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

Update October 21: Added Amazon Threat Intelligence's report of exploitation attempts beginning October 17, before public disclosure. Added Tenable Nessus plugins, including local checks for PHP packages from Linux distributions, along with guidance on using Tenable Hexa AI to find vulnerable PHP installations and create remediation tickets. …