Tag
#php
News and guides about PHP and the apps that run on it.
-
PHP2Shell: Update PHP Now, Then Check That Your Web Server Is Actually Using It
Two critical PHP bugs, CVE-2026-109618 and CVE-2026-109619, can let an attacker run code on your server without logging in. Fixes are out and attacks have started. Here's what's affected, how to check the PHP your web server really runs, and how to update common self-hosted setups.