The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]
PHP ships emergency patches for critical PHP2Shell flaws
Résumé + lien vers la source. Sans paywall, sans tracking.