Post
SEOSiri - Digital Marketing Blog
seosiri.com
did:plc:palu3du3vy2jauhucai3l5zy
<b>PHP2Shell: patch PHP first</b>
CVE-2026-109618 and CVE-2026-109619, CVSS 9.2. Fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
• Inventory every PHP runtime
• Upgrade to a fixed release
• Cannot patch yet: <code>session.upload_progress.enabled=0</code>, restart workers
2026-10-27T01:26:26.869Z