Cybersecurityphp2shell: two critical PHP flaws, update your servers now
Patched on 21 October 2026, CVE-2026-109618 and CVE-2026-109619 can let an attacker take over a PHP web server without authentication. What you need to know and do today.
2 min read


