From Dev.to
PHP2Shell: Two Critical PHP RCE Flaws and What to Do in the First Hour
On October 21, 2026, the PHP project released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. Amazon Threat Intelligence calls t...