PHP – Security Blog https://blog.siteguarding.com Wed, 28 Oct 2026 00:01:16 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg PHP – Security Blog https://blog.siteguarding.com 32 32 PHP2Shell Vulnerabilities Exploited: Patch PHP Before Oct 29 https://www.siteguarding.com/security-blog/php2shell-cisa-kev-patch-now/ Wed, 28 Oct 2026 00:01:16 +0000 https://www.siteguarding.com/security-blog/php2shell-cisa-kev-patch-now/ CISA added the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities catalog on October 26, after honeypots caught attackers running code on an unpatched PHP server. The flaws are in the PHP runtime itself, so updating WordPress or Joomla does not close them. Key takeaways PHP2Shell covers CVE-2026-109618 and CVE-2026-109619, two critical flaws in...

Source

]]> PHP2Shell on Shared Hosting: Now Exploited, and Only Your Host Can Patch It https://www.siteguarding.com/security-blog/php2shell-shared-hosting-site-owners/ Mon, 26 Oct 2026 15:32:59 +0000 https://www.siteguarding.com/security-blog/php2shell-shared-hosting-site-owners/ Attackers have achieved confirmed remote code execution through PHP2Shell, two critical PHP flaws tracked as CVE-2026-109618 and CVE-2026-109619. PHP shipped fixes on October 21. The catch for PHP2Shell shared hosting customers: the bug sits beneath WordPress and Joomla, so only your host can install the fix. Key takeaways PHP2Shell names two critical remote code execution flaws in the PHP runtime...

Source

]]>