On 21 October 2026, security researchers publicly disclosed two critical vulnerabilities in the core of PHP, the programming language behind about 70% of all websites on the internet. The flaws, identified as CVE-2026-109618 and CVE-2026-109619, are known as PHP2Shell. They affect PHP versions from 5.4 through 8.5.11. The vulnerabilities allow an unauthenticated attacker…

Read more