PHP2Shell: Critical PHP vulnerabilities patched, update now!

T2Covered by 1 source · first reported by Help Net Security at 21 Oct, 13:51 UTC

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the…