PHP2Shell: A Complete Guide to PHP's Critical RCE Flaws — News, Root Cause, and How to Secure Your Server
Two critical RCEs in the PHP engine itself (CVE-2026-109618 & CVE-2026-109619) are now being exploited at scale. A complete guide: the news, the Zend engine root cause, how to check & patch your server, temporary mitigations, and attack detection.