AINewsnow

Title: Emergency PHP Patch Released for "PHP2Shell" Critical RCE Flaws (CVE-2026-109618 & CVE-2026-109619) — CVSS 9.2

This story is from 2026-10-26. It is preserved in the archive; the latest stories are on the live feed.

Hey everyone, The PHP security team has dropped emergency security releases (PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35) to address two critical Remote Code Execution (RCE) vulnerabilities nicknamed PHP2Shell. If you manage web servers running PHP, you'll want to check this immediately. Here is a quick…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-26 10:31 · DEV Community — AI
    Title: Emergency PHP Patch Released for "PHP2Shell" Critical RCE Flaws (CVE-2026-109618 & CVE-2026-109619) — CVSS 9.2

More stories

  1. Meta Seeks Up to $95 Billion in Equity to Fund AI Spending — Bloomberg AI
  2. Anthropic's Claude bypassed a paywall to access Georgia voter data without authorization — Axios AI+
  3. Owners of Elvis Presley’s Music Sue Anthropic for Copyright Infringement — New York Times AI
  4. Anthropic sued for allegedly using 274 Elvis Presley songs to train AI models — The Guardian AI
  5. Nanbeige releases Nanbeige4.3-33B, an Apache 2.0 teacher model for smaller agents [N] — r/MachineLearning
  6. SpaceX closes $40 billion debt deal for AI chips, Elon Musk says — CNBC Technology
  7. AI bros: — r/antiai
  8. Built a downhill skateboarding game with Claude Code — r/ClaudeAI

Get the daily brief of stories like this at 6:30 every morning →