Tag: RCE flaws

Cybersecurity Threat Advisory: Critical PHP2Shell RCE vulnerabilities

PHP recently shipped an out-of-cycle emergency release fixing two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, collectively dubbed PHP2Shell. Both are rated 9.2 on CVSS v4.0 and can allow unauthenticated attackers to run code on vulnerable web servers. The...