TECH AND SECURITY COMPANIES RESPOND TO PHP2SHELL VULNERABILITIES

Summary from the TLDR InfoSec newsletter

PHP2Shell, CVE-2026-109618 and CVE-2026-109619, enable unauthenticated remote code execution. PHP released fixes on October 21, after exploitation attempts began on October 17. Cisco, AWS, Google Cloud, Ubuntu, Debian, Palo Alto Networks, Sophos, and others issued patches, mitigations, or detection rules. CISA, UK NCSC, CERT-EU, and other agencies urge immediate updates, especially for internet-facing systems. Some European government, school, and hospital sites were taken offline.