PHP2Shell: One Upload, Full Server
Security research firm Calif, working under OpenAI's Patch the Planet initiative, disclosed two critical PHP core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that let unauthenticated attackers read a PHP worker…