PHP2Shell is two pre-auth RCE bugs in PHP itself. Which versions fix them, which servers are most exposed, and what to set if you cannot update today.

#security #vulnerability-management #php

#patching articles

Android SMS of Death: how one WAP Push text crashes the phone process, and the patch Google calls won't fix

OpenSSL 4.1.0 released: DTLS 1.3, GREASE, and what breaks when you upgrade

PHP2Shell (CVE-2026-109618, CVE-2026-109619): which PHP servers are exposed and how to patch today