🚨PHP2Shell Vulnerabilities Exploited, 70% of Web at Risk

70% of the web is running unpatched PHP, hackers rejoice

PHP2Shell vulnerabilities, officially designated as CVE-2026-109618 and CVE-2026-109619, were discovered in PHP, allowing remote code execution without passwords. These bugs affect 70% of web-facing systems, making them a massive security risk. The PHP Foundation released patches on Wednesday, but many systems remain unpatched, leaving them vulnerable to exploitation. Security researchers warn that the situation isn't over, with confirmed compromises and post-exploit activity already reported.