CVE-2026-109619

PHP2Shell Vulnerability: Critical PHP Security Flaws Put Websites at Risk Worldwide

Two critical PHP memory-handling flaws — CVE-2026-109618 and CVE-2026-109619 — have exposed roughly 1.5 million PHP hosts and taken government…