Two critical remote code execution vulnerabilities, collectively tracked as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), are now being actively exploited by attackers in the wild. Administrators are strongly advised to apply patches immediately to prevent system compromise.

PHPRCEexploited-in-the-wildvulnerability
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →