Linux
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): How to Patch Your VPS and Protect WordPress
Two critical, actively exploited PHP flaws let attackers run code without logging in. How to find and patch every PHP install on a VPS, why you must restart workers, stopgaps if you can't patch, how to check for compromise, and extra steps for WordPress.