Cloudflare deploys protections against php2shell vulnerability

Reported by Cloudflare (Daniele Molteni)

Summary by Cyber Security News21 Oct 2026, 15:56 CET

About this summary. This is a short excerpt from the description that Cloudflare published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://blog.cloudflare.com/php-vulnerabilities-waf-protection/

Cloudflare deploys protections against php2shell vulnerability — Image: Cloudflare

Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell. The vulnerabilities affect all web servers running PHP 5.4 or later and they may allow an attacker to cause denial of service, remote code execution, and data exposure when an application processes specially crafted HTTP traffic.

Read the full article at Cloudflare →

Source attribution: headline and facts are from Cloudflare (blog.cloudflare.com). Summary method: excerpt of the source description. See our source attribution policy.