Infosecurity Magazine
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Two vulnerabilities that could affect the servers underlying many websites have been disclosed ahead of the planned security patches, leading major cybersecurity authorities to urge users to prepare for remediation. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively known as ‘PHP2Shell,’ were scheduled to be disclosed on October 21 at 2pm GMT.
Sources
- Infosecurity Magazine · 21-Oct-2026