What You Need to Know About the Critical PHP Vulnerabilities (PHP2Shell)
Overview On October 21, 2026, the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address CVE-2026-109618 and CVE-2026-109619. Both vulnerabilities can enable unauthenticated remote code execution in affected deployments and carry reported CVSS v4.0 base scores of 9.2. CVE-2026-109619 can also expose memory. The pair is also known collectively as “PHP2Shell.” Salesforce is […]
What You Need to Know About the Critical PHP Vulnerabilities (PHP2Shell) Read More »









