A pair of critical security vulnerabilities in PHP was publicly announced on 20 October 2026. The vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were dubbed ‘PHP2Shell’ and have had a wide-ranging impact on the public internet, forcing huge...