TECH NEWS
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors
PHP has rolled out patches fortwo critical-severity vulnerabilitiesnamed PHP2Shell that could provide attackers with unauthenticated remote code execution (RCE). The issues are tracked as CVE-2026-109618 (out-of-memory (OOM) corruption) and CVE-2026-109619 (stale global state) and have a CVSS score of 9.2. For both, RCE was confirmed on Apache with mod_