Millions of systems had to scramble to install patches
Researchers discovered PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) enabling passwordless access to systems. The PHP Foundation released patches preventing attacks on web-facing servers.
- Field
- computer security
- What they did
- Researchers discovered two vulnerabilities in PHP, dubbed PHP2Shell, which allow anyone to break into systems running PHP without needing a password.
- Why it matters
- These bugs forced millions of people worldwide to scramble to patch their systems before malicious hackers could exploit them.
#php#vulnerability#cve#web security#cybersecurity



