Security News PHP2Shell security flaws now sucessfully exploited in the wild BleepingComputer Daniel Bender 26 Oct 2026 Share Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.