Category
Rce
PHP2Shell: two critical PHP RCE flaws, and how to cut your risk while you patch
PHP2Shell (CVE-2026-109618 / CVE-2026-109619, CVSS 9.2) is pre-auth RCE in the PHP runtime itself. Here's the practical playbook to reduce exposure while the patch rolls out —...
27 Oct 2026
By Pawan Sharma
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Are You Exposed, and What to Do Today
PHP2Shell lets attackers take over PHP servers with no login. Check if you are exposed, which versions fix it, and what to do if you cannot patch today.
26 Oct 2026
By Pawan Sharma
