php2shell is a pair of critical memory-safety vulnerabilities in the PHP engine itself, tracked as CVE-2026-109618 and CVE-2026-109619. Escape detects affected PHP versions across your attack surface and shows you every exposed asset that needs the patch. php2shell is not a WordPress bug, a Drupal bug, or a bug in