PHP2Shell Explained: How AI Found a PHP Bug Hiding Since 2012, and How It Was Fixed
This story is from 2026-10-22. It is preserved in the archive; the latest stories are on the live feed.
On 21 October 2026 PHP shipped an emergency release for two bugs in the language itself: CVE-2026-109618 and CVE-2026-109619 , together nicknamed PHP2Shell . Both are rated 9.2 (Critical) and both can give an attacker remote code execution with no login - on a server whose application code has no b…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-22 16:41 · DEV Community — AI
PHP2Shell Explained: How AI Found a PHP Bug Hiding Since 2012, and How It Was Fixed