As you have surely seen via threat feeds or in the media, two vulnerabilities in the PHP framework were disclosed on October 21st, and patched versions were released on the same day. The vulnerabilities PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code…
PHP2Shell vulnerability (CVE-2026-109618 and CVE-2026-109619)



