Security advisory on PHP2Shell vulnerabilities
On 21 October 2026, two critical security vulnerabilities were disclosed in PHP, collectively known as PHP2Shell. These vulnerabilities could allow unauthenticated attackers to execute arbitrary code on affected systems.