SignalsMonitor LIVE INTELLIGENCE
CRIME & JUSTICEACTIVE

2 hours ago · Global

PHP ships emergency patches for critical PHP2Shell flaws

SIGNALSMONITORSECURITY

What's happening

SignalsMonitor is following this as a crime & justice story. BleepingComputer is the outlet attached so far. The reports are tied to Global. The first report grouped here was at 21 Oct 2026, 14:07 UTC. The headline in use is “PHP ships emergency patches for critical PHP2Shell flaws”. This note is SignalsMonitor's own briefing, not the publisher's article.

What we know

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...

BleepingComputerRead at BleepingComputer

Story timeline

Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.

Reported by 1 outlet

  • BleepingComputer
PHP ships emergency patches for critical PHP2Shell flaws