@compez.eth
🚨 Critical PHP Security Alert — PHP2Shell
Two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been disclosed in PHP, both rated 9.2/10.
Attackers may be able to execute code on vulnerable servers without authentication, potentially compromising websites and sensitive data.
What should you do?
✅ Update PHP immediately to a patched version: 8.2.35, 8.3.36, 8.4.27, or 8.5.12 (or your Linux distribution’s security-patched packages).
âś… Restart PHP services and verify the update.
âś… Review server logs for suspicious activity.
⚠️ Don’t assume your server is safe just because your website works!
đź”— https://www.php.net
1 reply
0 recast
17 reactions