PHP and securityAXEOOctober 26, 2026Uncategorized On October 21, the PHP project announced two critical security flaws (CVE-2026-109618 and CVE-2026-109619, nicknamed “PHP2Shell”). These flaws could allow an attacker to run their own code on a server without needing to log in.
