Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers

Cybersecurity NewsOctober 21, 20265 min read

PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. The PHP project rates both vulnerabilities 9.2 out of 10 under CVSS 4.0. Administrators should […] The post PHP Releases Emergency Patches for PHP2Shell Flaws Threatening Millions of Web Servers appeared first on Cyber Security News.

PHP has released emergency security updates for two critical vulnerabilities that could let unauthenticated attackers run code on vulnerable web servers. Tracked as CVE-2026-109618 and CVE-2026-109619, and collectively called PHP2Shell, the flaws affect PHP’s handling of memory during web requests. The PHP project rates both vulnerabilities 9.2 out of 10 under CVSS 4.0. Administrators should update PHP as soon as possible. The fixed releases are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. The vulnerabilities affect earlier versions in those branches. PHP 8.1 and older are no longer supported by the project, though some Linux distributions and long-term support providers…

Excerpt shown under the publisher's RSS terms · 98 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article