Critical PHP Vulnerabilities Lead to Global Concerns and Government Website Shutdowns

Global cybersecurity agencies are urging organizations to immediately patch two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively known as PHP2Shell. These flaws could enable unauthenticated remote code execution on vulnerable web servers, prompting some governments in Europe and elsewhere to take websites offline as a precautionary measure. Cloud firms have reported a surge in hacking attempts following the disclosure, highlighting the widespread impact on internet infrastructure.