PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

vulnerability

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

PHP has released a security update for two critical Remote Code Execution (RCE) vulnerabilities in its PHP 8.2 through 8.5 branches. While PHP has not yet released the fixes, security researchers are urging organizations…

The Hacker News · 8h ago CriticalCVSS 9.8KEVEPSS 100%

CVE-2026-109618 CVE-2026-109619 CVE-2024-4577 php rce vulnerability

vulnerability

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

These vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, could lead to remote code execution and are present in PHP versions 5 and above.

SecurityWeek · 5h ago Medium

CVE-2026-109618 CVE-2026-109619 php vulnerability remote code execution

vulnerability

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)

A critical PHP vulnerability (CVE-2026-109618, CVE-2026-109619) has been identified, impacting all PHP versions and leading to the change of the SANS Internet Storm Center’s alert to ‘yellow’. Cloudflare has deployed pro…

SANS Internet Storm Center · 29m ago Medium

CVE-2026-109618 CVE-2026-109619 php vulnerability patch

news.mlab.sh

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert