🚨 Critical PHP Security Alert — PHP2Shell Two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been disclosed in PHP, both rated 9.2/10. Attackers may be able to execute code on vulnerable servers without authentication, potentially compromising websites and sensitive data. What should you do? ✅ Update PHP immediately to a patched version: 8.2.35, 8.3.36, 8.4.27, or 8.5.12 (or your Linux distribution’s security-patched packages). ✅ Restart PHP services and verify the update. ✅ Review server logs for suspicious activity. ⚠️ Don’t assume your server is safe just because your website works! 🔗 https://www.php.net

PHPPHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.www.php.net

nikolaii.eth 🚀

@nikolaii.eth

Oct 22, 2026

So what happened to PHP yesterday? Anyone followed? I had to upgrade 2 servers and could not do it for a few hours. Had to replace the ppa[.]launchpadcontent[.]net with packages[.]sury[.]org to accomplish it. Was it an DDoS attack on the launchpad servers in order to penetrate more PHP servers?