PHP2Shell: How to Fix CVE-2026-109618 and CVE-2026-109619
PHP2Shell is a pair of critical flaws in PHP itself that let attackers run code on web servers without logging in. Attacks are already under way. Here is how to find every PHP install, patch it and check for signs of a break-in.