PHP is so dead that everyone talks about these two vulnerabilities, even mainstream media.
Commit
8683bf1
So i made a post-mortem articles ?
https://blog.slabb.dev/en/php2shell-cve-2026-109618-cve-2026-109619-two-critical-rces-in-php-core-lab-demo-and-how-to-fix-38f6
Journal de bordphp2shell: two critical RCEs in PHP core — lab demo and how to fix CVE-2026-109618 and CVE-2026-109619Two critical RCEs emergency-patched in the PHP core — php2shell, 9.2/10, every release since 5.4 potentially exposed. The leak, the accelerated patch, the lab demo, and the fix.
commit 8683bf1