Skip to content
NoticeAWS reports broad exploitation attempts against php2shell in the wild (update of 22 Oct). If your PHP is not on a fixed version, update now.Details
Critical CVE-2026-109618 · CVE-2026-109619/ CVSS 9.2 / Disclosed 2026-10-21 Last updated

Personal patch plan

If you would rather not work out the update yourself, send us your setup and get written steps for it.

What to send us

  • Your site URL (for context only, we never scan it)
  • Your hosting provider and control panel
  • The output of php -v
  • Your Linux distribution, if you run a VPS

We write instructions for you to carry out. We do not ask for passwords and never need access to your server.