PHP2Shell: Critical PHP vulnerabilities patched, update now!

Moyen · Help Net Security ·

Ce qui s'est passé

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and the team is strongly urging all PHP users to update immediately. Who is affected? Every PHP installation that serves web requests is affected, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. Setups More The post PHP2Shell: Critical PHP vulnerabilities patched, update now! appeared first on Help Net Security .

Références CVE

  • CVE-2026-109618
  • CVE-2026-109619

Source originale

Help Net Security

Analyse originale assistée par IA, sources citées. Vérifiez auprès de l'avis du fournisseur avant d'agir.

← Toute la veille cyber