PoC Exploit Released for Two Critical PHP RCE Vulnerabilities as Hackers Launch Attacks

Public proof-of-concept exploit code targeting two critical PHP vulnerabilities has surfaced as attackers scan exposed servers and attempt exploitation. Tracked as CVE-2026-109618 and CVE-2026-109619, the vulnerabilities are collectively called PHP2Shell and carry CVSS v4.0 scores of 9.2, potentially allowing unauthenticated remote code execution... Weiterlesen: PoC Exploit Released for Two Critical PHP RCE Vulnerabilities as Hack…