Palo Alto Networks
-
PHP2Shell: two critical PHP flaws exploited, from WordPress sites to Palo Alto firewalls
PHP2Shell is the name given to two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, that let an unauthenticated attacker run code on a server. CISA has confirmed their exploitation, and they…