https://www.live-feeds.com/feed/php2shell-critical-php-vulnerabilities-patched-update-nowContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/php2shell-critical-php-vulnerabilities-patched-update-nowhttps://www.live-feeds.com/feed/php2shell-critical-php-vulnerabilities-patched-update-now#u152539Sun, 25 Oct 2026 01:35:52 +0000The PHP development team has released emergency security updates to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. These unauthenticated Remote Code Execution (RCE) flaws affect PHP and put numerous websites at risk. Updates have been released to address these vulnerabilities, and website operators are urged to apply them immediately.Why it mattersThe PHP2Shell vulnerabilities impact a significant portion of the internet, with an estimated 70% of websites using PHP. The vulnerabilities allow for unauthenticated RCE, making them particula