Security News PHP ships emergency patches for critical PHP2Shell flaws BleepingComputer Daniel Bender 21 Oct 2026 Share The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.
