Executive Summary PHP2Shell refers to two critical vulnerabilities in PHP’s core runtime, CVE-2026-109618 (RCE via OOM corruption) and CVE-2026-109619 (RCE via stale global state), both rated 9.2 under CVSS. The flaws affect PHP’s memory management and error handling, rather than a specific application or framework. AI-assisted security research involving Wiz Research, OpenAI, and Calif helped […]