On Wednesday, a decades-old open-source web technology called PHP almost broke the internet, thanks to two vulnerabilities that had sat dormant for years until researchers recently figured out a way to exploit them. The bugs are dubbed PHP2Shell , officially designated as CVE-2026-109618 and CVE-2026-109619 . In simple terms, the bugs allow anyone who knows how to exploit them to break into an online system running PHP, such as a website or internet-facing server, without needing a password to…
Why this update matters
This developing story is relevant for readers tracking technology because it reflects fresh changes from the original source and signals where attention is shifting next.
Key details
The report was collected automatically and prepared for publication with a newsroom workflow that focuses on clarity, search visibility, and quick understanding.
Readers should review the original source for direct statements, official notices, and any later corrections or additions as the story evolves.
Related coverage
Continue reading with more reporting from the same topic cluster.