Vulnerabilities
How PHP2Shell RCE Flaws Target Unpatched Web Servers
Two critical memory-safety flaws in the PHP engine allow unauthenticated remote code execution, prompting emergency patches and urgent offline advice.
CVE-2026-109618
Everything Sandbox Gazette has reported about CVE-2026-109618: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
How can organizations mitigate PHP's critical CVE-2026-109618 and 109619 remote code execution vulnerabilities?
The PHP project released patches for two critical remote code execution flaws that allow unauthenticated attackers to bypass application code entirely.