https://mageenv.com/blog/ Practical guides on security, ecommerce and web development. https://mageenv.com/blog/php2shell-cve-2026-109618-109619-check-and-patch/ https://mageenv.com/blog/php2shell-cve-2026-109618-109619-check-and-patch/ Thu, 22 Oct 2026 09:00:00 GMT Two critical PHP bugs let attackers run code on a server without logging in. Here are the fixed versions, why your version number may look unpatched when it is not, and a 5-minute check for any PHP site.