php2shell

PHP2Shell (CVE-2026-109618 and CVE-2026-109619): what to do now about your PHP

Two critical flaws in the PHP core allow unauthenticated RCE and memory disclosure. Fixed versions, mitigations, secret rotation and an ordered checklist.