PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. The PHP project rates both vulnerabilities 9.2 out of 10 under CVSS 4.0. Administrators should […]
This article has been indexed from Cyber Security News
Read the original article:
PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers