PHP2Shell Moves to Active Exploitation

CISA says PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 are actively exploited, allowing unauthenticated remote code execution across web-serving and embedded PHP deployments. Patch supported releases, inventory hidden runtimes, and hunt exposed systems for compromise.