Aymen Ben Aouicha, CISSP
Head of Solutions Engineering, Outpost24
Cybersecurity News
22 Oct 2026
PHP2Shell (CVE-2026-109618 and CVE-2026-109619) gives attackers unauthenticated remote code execution in the PHP core. Details leaked before the scheduled patch, so defenders have no head start. PHP sits behind around 70% of websites, including corporate sites, customer portals, marketing pages,…
