VideoVideo:CURT
PHP2Shell: Critical Memory Flaws in the PHP Interpreter Enable RCE
Two critical vulnerabilities in the PHP core engine, dubbed PHP2Shell (CVE-2026-109618 and CVE-2026-109619), allow unauthenticated Remote Code Execution before application code even begins to execute.