A critical security alert has been issued for PHP following the discovery of two vulnerabilities that could expose vulnerable servers to remote code execution and other security risks.
The vulnerabilities, referred to as PHP2Shell in security reporting, have been assigned the identifiers CVE-2026-109618