The U.S. Cybersecurity and Infrastructure Security Agency has added two critical PHP vulnerabilities, jointly known as PHP2Shell, to its Known Exploited Vulnerabilities catalog after confirming real-world exploitation. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, can let unauthenticated attackers remotely execute code on vulnerable PHP web servers. CISA added both issues to the KEV catalog on […]
This article has been indexed from Cyber Security News
Read the original article:
CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks