The flaws are collectively called PHP2Shell and assigned a CVSS score of 9.2 each. CVE-2026-109618 involves memory corruption linked to out-of-memory ...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of ...
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.