PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Two critical PHP flaws, identified as CVE-2026-109618 and CVE-2026-109619, have been leaked and could potentially allow unauthenticated remote code execution. These vulnerabilities may lead to mass exploitation. The bugs are considered serious and could have significant implications. Remote code execution could enable attackers to execute malicious code without authentication. The leaked flaws may pose a significant threat to systems using PHP.