The vulnerability could allow attackers to take control of or disrupt websites and access sensitive user information.
Critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 sparked emergency patching efforts after a disclosure leak.
Two critical remote code execution (RCE) flaws dubbed "PHP2Shell" have hit the core PHP programming language, triggering ...