cloudhafen · Oct 23, 2026 · 3:07 PM UTC

cloudhafen

Tweets
Tweets & Replies
Media
Search

Oct 23

PHP2Shell: two critical RCE bugs in PHP (CVE-2026-109618, CVE-2026-109619), fixed in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. After updating, restart your PHP workers, or the old code keeps running. Then check the site still answers. That part is what we build Leuchtturm for.

Security advisory card: PHP2Shell, CVE-2026-109618 and CVE-2026-109619, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Then update PHP, restart PHP workers, check the site still answers.