Link:watchTowr
PHP2Shell: Exploited Remote Code Execution Vulnerabilities in PHP
Dubbed PHP2Shell, two critical remote code execution flaws (CVE-2026-109618 and CVE-2026-109619) in PHP allow unauthenticated attackers to execute arbitrary code. Security firm watchTowr confirmed in-the-wild exploitation.
From Video: PHP2Shell: Kritische Sicherheitslücken im PHP-Interpreter ermöglichen RCE