CVE-2026-109618 – Security Blog https://blog.siteguarding.com Mon, 26 Oct 2026 15:32:59 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg CVE-2026-109618 – Security Blog https://blog.siteguarding.com 32 32 PHP2Shell on Shared Hosting: Now Exploited, and Only Your Host Can Patch It https://www.siteguarding.com/security-blog/php2shell-shared-hosting-site-owners/ Mon, 26 Oct 2026 15:32:59 +0000 https://www.siteguarding.com/security-blog/php2shell-shared-hosting-site-owners/ Attackers have achieved confirmed remote code execution through PHP2Shell, two critical PHP flaws tracked as CVE-2026-109618 and CVE-2026-109619. PHP shipped fixes on October 21. The catch for PHP2Shell shared hosting customers: the bug sits beneath WordPress and Joomla, so only your host can install the fix. Key takeaways PHP2Shell names two critical remote code execution flaws in the PHP runtime...

Source

]]>