Threat Analysis · · 6 min read
PHP2Shell: what CVE-2026-109618 and CVE-2026-109619 mean and how to respond
Two critical PHP flaws allow unauthenticated code execution on web servers. Who is affected, how to patch or mitigate, and how to look for signs of attack.