Skip to content

harasim.dev

cve

2026

PHP2Shell: what CVE-2026-109618 and CVE-2026-109619 mean for your servers

Two critical PHP engine bugs went public on 21 October 2026. Here is what they do, why the news noticed, and how I’d patch and protect a server.

October 23, 2026
PHP & Engineering

harasim.dev © 2026. All Rights Reserved.