Well, here we go again. Except this one wasn’t just another vulnerability. If you run anything on PHP, you’ve probably already heard about PHP2Shell. But let me recap it concisely:

1. Two critical bugs in PHP itself, CVE-2026-109618 (RCE via out-of-memory corruption) and CVE-2026-109619 …