Updated logo UPDATED Back to feed
breach watch Help Net Security October 21, 2026

PHP2Shell: Critical PHP vulnerabilities patched, update now!

AI Summary

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the team is strongly urging all PHP users to update immediately. Every PHP installation that serves web requests is affected, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and L

0 views
Read full article
Read it on Updated — Tech News. Ahead of the Curve.
Discussion
Sign in to join the discussion.
Loading comments…