CISA Warns of Active Exploitation of PHP2Shell and VMware ESX Logging Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings regarding the active exploitation of PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a VMware ESX logging flaw (CVE-2026-41709). These vulnerabilities, which allow for unauthenticated remote code execution and unrecorded administrative actions respectively, have been added to CISA's Known Exploited Vulnerabilities catalog.