URGENT SECURITY ADVISORY: PHP2Shell — Critical RCE Affecting 70% of the Internet
Today, October 21, 2026, Wiz Research disclosed PHP2Shell, two critical vulnerabilities in the core PHP engine (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2). These are not application bugs — they exist in PHP itself. What this means for your business: If your organization runs WordPress, Drupal, Joomla, or any other PHP-based application, you are potentially exposed. An […]
