
CyberClan Security Brief: Critical PHP “PHP2Shell” Vulnerabilities Require Immediate Attention
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated remote code execution on web servers running PHP. Severity: Critical (CVSS 9.2) Two vulnerabilities in the core PHP engine can

