Decrypt

PHP Panic: Two Critical Bugs Put 70% of the Internet at Risk, and Everyone Is Freaking Out

Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password.
The Hacker News

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP patches two critical RCE flaws affecting web servers as Cloudflare reports early exploit attempts, with no confirmed ...
Notebookcheck

PHP2Shell: Critical PHP flaws hit mod_php servers hardest

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, ...

Critical flaws strike PHP as disclosure embargo is broken

PHP maintainers are urging users to prepare for patches addressing two critical vulnerabilities, CVE-2026-109618 and CVE-2026 ...