How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

PHP2Shell Vulnerability Update (CVE-2026-109618 & CVE-2026-109619)

calendar_today October 22, 2026 person Amy Patterson domain cynet

Executive Summary PHP2Shell refers to two critical vulnerabilities in PHP’s core runtime, CVE-2026-109618 (RCE via OOM corruption) and CVE-2026-109619 (RCE via stale global state), both rated 9.2 under CVSS. The flaws affect PHP’s memory management and error handling, rather than a specific application or framework. AI-assisted security research involving Wiz Research, OpenAI, and Calif helped […]

open_in_new Read original post