Cybersecurity · 3 views
PHP ships emergency patches for critical PHP2Shell flaws
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities ( CVE-2026-109618 and CVE-2026-109619 ) tracked collectively as PHP2Shell.
AI Summary
The PHP security team issued emergency patches for two critical remote code execution flaws, identified as CVE‑2026‑109618 and CVE‑2026‑109619 and collectively dubbed PHP2Shell. The unauthenticated vulnerabilities were discovered by researchers from Calif, Wiz and OpenAI and affect every PHP deployment that processes web requests, including PHP‑FPM, Apache with mod_php, php‑cgi, FrankenPHP and LiteSpeed. The patches aim to close the flaws across all affected installations.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Optiv Launches CyberBOT Cybersecurity Awareness Training ProgramContinue reading
- Widespread PHP Flaw May Cause Many Site Outages TodayContinue reading
- PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts EmergeContinue reading
- Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime SecurityContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow