Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
AI-generated summary PHP released fixes for PHP2Shell vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619 after reports from Calif and Wiz. Censys tracked millions of PHP services running affected versions while attackers attempted to exploit the flaw.