PHP php2shell (CVE-2026-109618 / 109619): patch Monday for every web PHP stack
Unauthenticated RCE fixed in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35. CISA urges immediate patching; Cloudflare WAF is mitigation only. Monday checklist for IT/ops.
Vendor security advisories, patch windows, and Monday checklists for IT and operations teams.
Last updated
Part of Tech News by GeekDad · Tech News · Super Intelligence
Unauthenticated RCE fixed in PHP 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35. CISA urges immediate patching; Cloudflare WAF is mitigation only. Monday checklist for IT/ops.