PHP2Shell

2026 security vulnerability in PHP

History Claim

PHP2Shell is a set of two high-impact vulnerabilities in PHP versions 5.4–8.5, known under Common Vulnerabilities and Exposures IDs CVE-2026-109618 and CVE-2026-109619, that allow remote code execution (RCE). Their existence was publicly announced on 20 October 2026. An emergency patch and details about the vulnerabilities were released on the following day.

from Wikipedia
PHP2Shell
Image: Wikimedia Commons · About this image

Handles

1 external identifier

Something wrong with this entry? Report it · How corrections work

Last updated · Handles last checked · How we check