Link:Calif Research
PHP2Shell: Critical Remote Code Execution Flaws Uncovered in PHP
Calif Research has disclosed PHP2Shell, detailing two severe PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) triggered via out-of-memory states and addressed in the October 2026 security release.
From Video: PHP2Shell: Kritische Sicherheitslücken im PHP-Interpreter ermöglichen RCE