PHP maintainers have announced upcoming security updates for two high-severity vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 in severity. Research suggests these flaws may impact PHP versions dating back to 2004. Reports have identified a tool, 'PHP2Shell,' purportedly capable of executing code on widely used platforms including Laravel, Drupal, and Joomla. Developers and sysadmins should prepare for an immediate update rollout. Because PHP is used to power ...