Security Update For Critical PHP Vulnerabilities
PHP developers have released emergency security updates for two critical vulnerabilities collectively known as PHP2Shell, moving the response from advance warnings to immediate remediation for organisations operating PHP-based websites and applications. The October 21 release addresses CVE-2026-109618 and CVE-2026-109619. PHP’s official security announcement identifies potentially exposed environments across PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and…