Research · Oct 21, 2026 · 10 min read
PHP2Shell: Why the October 2026 PHP Patch Matters for Businesses
Two critical flaws in PHP itself (CVE-2026-109618/-109619) allow unauthenticated remote code execution. What happened, the business risk, and how to patch.