How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

PHP2Shell: What Teams Need to Know About CVE-2026-109618 and CVE-2026-109619

calendar_today October 22, 2026 person Matt Rowe domain remedio

On October 21, the PHP project released emergency fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, now widely referred to as “PHP2Shell.” Both are rated CVSS 9.2 and allow an unauthenticated attacker to run code on a server with a single crafted web request. The post PHP2Shell: What Teams Need to Know About CVE-2026-109618 and CVE-2026-109619 appeared first on Remedio .

open_in_new Read original post