Tencent Cloud Security Center has detected that PHP has a remote code execution vulnerability. The vulnerability numbers are CVE-2026-109618, CVE-2026-109619, codenamed “php2shell”, respectively. An unauthenticated remote attacker can cause a specially crafted multipart POST request to trigger memory corruption and ultimately achieve remote code execution, thereby fully controlling hazards such as servers. Tencent Cloud Security recommends that you carry out timely security self-checks. If it is affected, please update and fix it in a timely manner to avoid being invaded by external attackers.

Tencent Cloud Security Center has detected that PHP has a remote code execution vulnerability. The vulnerability numbers are CVE-2026-109618, CVE-2026-109619, codename “php2shell”, respectively. An unauthenticated remote attacker can cause a specially crafted multipart POST request to trigger memory corruption and ultimately achieve remote code execution, thereby fully controlling hazards such as servers. Tencent Cloud Security recommends that you carry out timely security self-checks. If it is affected, please update and fix it in a timely manner to avoid being invaded by external attackers.