php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

T2Covered by 1 source · first reported by OMG! Ubuntu / It's FOSS News / 9to5Linux / Fedora Magazine / Ubuntu Blog / Arch News / Debian News at 21 Oct, 14:43 UTC

Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The vulnerabilities have been assigned the CVE-2026-109618 and CVE-2026-109619 identifiers, but are also referred to using the…

devsecurity

Sources

• T2php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes availableOMG! Ubuntu / It's FOSS News / 9to5Linux / Fedora Magazine / Ubuntu Blog / Arch News / Debian News21 Oct, 14:43

Vulnerabilities

• CVE-2026-109618
• CVE-2026-109619