Oct 22, 2026 PHP2Shell - The PHP-Apocalypse in the language itself CVE-2026-109618 and CVE-2026-109619 let an unauthenticated request run code on a PHP server. What broke, who is exposed, how to patch, and how to build PHP yourself on a distro that is out of support. linux php security cve linux patching