On October 20, 2026, two critical vulnerabilities were discovered in PHP (CVE-2026-109618 and CVE-2026-109619, also known as PHP2Shell). These vulnerabilities allowed unauthenticated remote code execution (RCE) under certain conditions. The PHP development group has since released official patches to resolve these issues. To ensure the security ...