On October 21, 2026, two critical PHP vulnerabilities became public: php2shell (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2). Together they could let an attacker run code on a PHP server without logging in. PHP runs a large share of the web, and…

The post Php2shell: what zero-day response looks like for IONIX customers appeared first on Security Boulevard.

Sam Collins-Zaluda

Source: Security Boulevard
Source Link: https://securityboulevard.com/2026/11/php2shell-what-zero-day-response-looks-like-for-ionix-customers/