php

PHP2Shell: Critical RCE Vulnerabilities in PHP Core

The PHP Group patched two critical core flaws (CVE-2026-109618, CVE-2026-109619, rated 9.2) that allow unauthenticated remote code execution; exploitation in the wild is confirmed and CISA urges immediate patching.