PHP2Shell (CVE-2026-109618, CVE-2026-109619): which PHP servers are exposed and how to patch today
PHP2Shell is two pre-auth RCE bugs in PHP itself. Which versions fix them, which servers are most exposed, and what to set if you cannot update today.
System architecture
Data models, migrations and the decisions that are expensive to reverse.