Nextcloud

Four Places PHP Was Hiding: Patching PHP2Shell (CVE-2026-109618/109619) Across the Fleet
Oct 23, 2026 16 min read
On 2026-10-21 the PHP project shipped an out-of-band release fixing a pair of vulnerabilities that quickly got the nickname “PHP2Shell”: CVE-2026-109618 and CVE-2026-109619, CVSS …
- Security
- Linux