Tencent Cloud Security Center has detected that PHP has a remote code execution vulnerability. The vulnerability numbers are CVE-2026-109618, CVE-2026-109619, codename “php2shell”, respectively. An unauthenticated remote attacker can cause a specially crafted multipart POST request to trigger memory corruption and ultimately achieve remote code execution, thereby fully controlling hazards such as servers. Tencent Cloud Security recommends that you carry out timely security self-checks. If it is affected, please update and fix it in a timely manner to avoid being invaded by external attackers.

Disclaimer:Webull uses external vendor Google Translation Service for news translations where we endeavour to ensure these are correct, however, we recommend that you please double-check this information accordingly. Webull is not responsible for translation errors or issues.