Cyber Security Alert: PHP2Shell

Two critical vulnerabilities in PHP have been reported worldwide, which could allow attackers to take control of vulnerable web servers, without authentication.

Disclosed on 21 October 2026, the vulnerabilities CVE-2026-109618 and CVE-2026-109619, known collectively as PHP2Shell, affect the core PHP engine, a technology underpinning approximately 70% of websites worldwide.

With a severity score of up to 9.2/10, these flaws could expose organisations to remote code execution, sensitive data theft and website compromise. Their impact extends across PHP-based environments, including WordPress, Drupal and Joomla.

BIRGER. RECOMMENDATIONS:

To mitigate the risk of exploitation, BIRGER. recommends taking immediate action to identify vulnerable systems, apply the necessary security updates and strengthen your defences. Use the following 4-steps essential guidelines to reduce your exposure and protect your digital assets.

• Identify: Check all servers, websites and applications running PHP, including legacy environments.

• Patch immediately: Upgrade to a fixed PHP release: 8.5.12, 8.4.27, 8.3.36 or 8.2.35, as appropriate. For older or unsupported versions, consult your operating system or hosting provider for available security fixes and an upgrade path.

  PHP has released security fixes for both vulnerabilities, with the official advisories identifying the affected versions and the corresponding fixed releases as follows:

1. PHP 8.2 releases before 8.2.35: Update to 8.2.35

2. PHP 8.3 releases before 8.3.36: Update to 8.3.36

3. PHP 8.4 releases before 8.4.27: Update to 8.4.27

4. PHP 8.5 releases before 8.5.12: Update to 8.5.12

• Reduce exposure: If immediate patching is not possible, urgently assess the risk and restrict external access. Consider taking vulnerable, internet-facing services offline until effective remediation is in place.

• Verify: Confirm that all exposed systems have been updated and investigate any signs of suspicious activity.

NO PATCH. NO PEACE OF MIND.

At BIRGER., we believe Cyber Security is fundamental to business resiliency. Proactive action is essential to protect your digital assets, sensitive information and business continuity.

Do not wait for an incident to act. Assess your exposure and secure your PHP environments now.

For more information on this topic and on our Cyber Security Solutions & Services, please contact us by mail at security@birger.technology.

Regards,

BIRGER.