PHP
Responding to php2shell, CVE-2026-109618 and CVE-2026-109619
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked before PHP could ship a fix. Here's what's known, what isn't, and the three things we did to protect Report URI in the hours before the patch, all of which you can