Php

vulnerabilities 2026-10-21 Critical
PHP2Shell: Leaked CVE-2026-109618 and CVE-2026-109619 Give Unauthenticated RCE in the PHP Engine
Two CVSS 9.2 flaws in the PHP engine leaked ahead of coordinated disclosure; PHP shipped emergency releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 as exploit attempts appeared.
rce php zero-day active-exploitation web-server memory-corruption

PHP2Shell: Leaked CVE-2026-109618 and CVE-2026-109619 Give Unauthenticated RCE in the PHP Engine