PHP2Shell Emergency Fixes Land
PHP released emergency fixes for CVE-2026-109618 and CVE-2026-109619, two runtime flaws that can give unauthenticated attackers code execution on web servers. Update to PHP 8.2.35, 8.3.36, 8.4.27, or 8.5.12 and restart workers.