Security

PHP’s “php2shell” Vulnerabilities: Steps to Take Before the Patches Arrive

Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow remote arbitrary code execution and reportedly have CVSS v4.0 scores of 9.2. Patched versions are scheduled for release at 23:00 JST on October 21, 2026.

BuildSecurityDOLPHIN2026.10.21No replies yet