Critical PHP Vulnerabilities (PHP2Shell) Spark Global Cybersecurity Concerns, Require Immediate Patching

Two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as 'PHP2Shell,' have been disclosed in the open-source programming language PHP. These flaws allow unauthenticated remote code execution and affect a significant portion of the internet, including platforms like WordPress and Drupal. The Cybersecurity and Infrastructure Security Agency (CISA) has urged organizations to identify affected systems and immediately apply available security updates, prioritizing internet-facing infrastructure.