23 min read
PHP2Shell (CVE-2026-109618): How to Check and Fix Your Site
Two critical PHP bugs let attackers run code on a web server without logging in. How to tell if your site is exposed, how to patch it on every common kind of hosting, and how to check whether someone got in first.




















