PHP ships emergency patches for critical PHP2Shell flaws
From BleepingComputer to All on Wed Oct 21 10:33:20 2026
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]