Protecting Haltdos Customers Against PHP “PHP2Shell” Critical Zero-Day Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Executive Summary A pair of critical memory safety vulnerabilities—collectively dubbed “PHP2Shell” (CVE-2026-109618 and CVE-2026-109619) have been publicly disclosed in the core PHP runtime environment. Affecting virtually all major PHP versions ranging from 5.4 through 8.5.11, these flaws allow unauthenticated remote...






