
code-bits
PHP2Shell: NSA and FBI Say Patch PHP Now (or Take the Site Offline)
Two critical PHP core bugs, CVE-2026-109618 and CVE-2026-109619, can give attackers remote code execution without logging in. Here's what happened, who's affected, and what to do today.
Oct 21, 20265 min read
