PHP2Shell: Beyond the Headlines, Hype, and Real-World Impact
When CVE-2026-109618 and CVE-2026-109619 were disclosed on October 21, the reaction was immediate. Vendor alerts went out, threat intelligence teams started monitoring for exploitation, hosting providers began rolling out patches, and headlines quickly focused on one very large number: nearly 70% of the web uses PHP.