On October 21, 2026, the PHP project shipped emergency releases for 2 critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, now known together as PHP2Shell. Both are rated 9.2 out of 10 on CVSS 4.0, the Critical band.
Discovery
- searchSearch
- storefrontProducts
- hubMCP Server
- monitoringAnalytics
- query_statsSearch Terms
- workspace_premiumScore
Learnings
- auto_storiesStories
- categoryAreas
- helpFAQ
- forumConversations
- descriptionPapers
- mailNewsletters
- video_libraryVideos
- timelineTimeline
Guidance
- codeTechnology of APIs
- business_centerBusiness of APIs
- campaignEvangelism of APIs
- gavelGovernance of APIs
- historyHistory of APIs
- account_balancePolitics of APIs
Toolbox
- domainProviders
- apiAPIs
- cloudSolutions
- buildTools
- verifiedStandards
- gavelRegulations
- horizontal_ruleHeaders
- layersOverlays
- extensionExtensions
- schemaSchema
- policyPolicies
- ruleRules