SecurityWeek Follow PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Several cybersecurity companies saw exploitation attempts of CVE-2026-109618 and CVE-2026-109619 before PHP released the patches. https://www.securityweek.com/php2shell-patches-land-as-first-exploitation-attempts-hit-sensors/ securityweek.com