SecurityWeek Follow PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. https://www.securityweek.com/php2shell-mass-exploitation-looms-for-leaked-critical-php-flaws/ securityweek.com