Urgent

PHP2Shell: critical PHP vulnerabilities threaten web servers. Immediate update required

Two severe PHP interpreter vulnerabilities, CVE-2026-109618 and CVE-2026-109619, may allow unauthenticated remote code execution. Security patches were published on 21 October 2026.