Built In

PHP Has Powered the Web for Decades — Now It’s at the Center of a Major Security Crisis

PHP is a programming language tailored for web development, and it now supports nearly 70 percent of the world’s websites. We ...

PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.
Help Net Security

PHP2Shell: Critical PHP vulnerabilities patched, update now!

The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities ...
Notebookcheck

PHP2Shell: Critical PHP flaws hit mod_php servers hardest

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...