php -vphp8.1memory_limit=-1
- 1What happened
- 2What has…
- 3What remains…
PHP2Shell: PHP vulnerabilities CVE-2026-109618 and 109619 — what to do
Critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 (“PHP2Shell”) are fixed in releases 8.2.35, 8.3.36, 8.4.27 and 8.5.12, and attacks have been confirmed. What is officially known and what to do with your website.













