PHP ships emergency patches for critical PHP2Shell flaws

By Sergiu Gatlan · BleepingComputer · Wednesday, 21 October 2026 at 14:07 (2h ago) · Original article ↗

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Everything In Cyberpunk 2077′s Edgerunners II-Themed 2.5 Update

CD Projekt Red is still bringing new quests and features to the RPG six years after launch

Kotaku 11m ago

Security

GOG taken offline for maintenance in wake of PHP security emergency

GOG and GOG Galaxy were taken offline following news of critical web vulnerabilities.

PC Gamer 11m ago

Security

Websites taken down worldwide as critical cyber-security update issued

The vulnerabilities with PHP, a programming language widely used across the internet, have been described as the most significant ever found by AI.

BBC Technology 24m ago

PHP ships emergency patches for critical PHP2Shell flaws

More Security & Privacy

Everything In Cyberpunk 2077′s Edgerunners II-Themed 2.5 Update

GOG taken offline for maintenance in wake of PHP security emergency

Websites taken down worldwide as critical cyber-security update issued