PHP2Shell update: the patches are out, but patching is only half of the job. Two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated remote code execution. The details leaked before the fix did, and exploitation attempts followed fast. What is amazing is how it was found. None of the building blocks were a secret. Out-of-memory […]
Categories