CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a ...
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.