Vulnerabilities · InfosecFeed Brief
Critical Vulnerabilities in PHP Require Immediate Patching
Vulnerabilities
What you need to know
CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as “php2shell,” allow for unauthenticated remote code execution in PHP and affect all PHP installations serving web requests. Organizations should immediately update to PHP 8.5.12…
Source transparency
Read the original report at CISA Alerts ↗
This is an InfosecFeed curated brief based on reporting from CISA Alerts. InfosecFeed does not claim ownership of the original reporting.