PHP2Shell Critical Flaws Under Active Exploitation

Two critical remote code execution vulnerabilities tracked as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) are actively being exploited in the wild.…

Immediately verify whether your organization runs PHP2Shell in production environments. Contact the vendor for security patches and deploy them without delay. Monitor your systems for compromise indicators and consider isolating affected hosts until patched.