PHP2Shell: What to Know About CVE-2026-109618 and -109619 - Blog | Menlo Security
Image supplied with the source report: Menlo Security, Inc..

Two critical PHP flaws let attackers take over web servers without logging in. Learn affected versions, how PHP2Shell works and what to do now.

Source disclosure

This is a source-linked briefing. Read the original report from Menlo Security, Inc. .

Technology Menlo Security, Inc.