https://www.live-feeds.com/feed/php-issues-emergency-patches-for-two-critical-php2shell-rce-flaws-as-exploit-attempts-emergeContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/php-issues-emergency-patches-for-two-critical-php2shell-rce-flaws-as-exploit-attempts-emergehttps://www.live-feeds.com/feed/php-issues-emergency-patches-for-two-critical-php2shell-rce-flaws-as-exploit-attempts-emerge#u154050Sun, 25 Oct 2026 12:46:29 +0000Global security teams are rushing to update systems after the release of emergency patches for two critical remote code execution vulnerabilities affecting the core PHP language runtime. Tracked collectively as PHP2Shell and designated as CVE-2026-109618 and CVE-2026-109619, the unauthenticated flaws carry a CVSS score of 9.2. Exploit attempts and proof-of-concept code have emerged in the wild, targeting servers globally. Security advisories emphasize that updating the PHP runtime is the only way to fully protect servers, with the highest risk present on systems utilizing Apache mod_php.Why it