Cloudflare deploys protections against php2shell vulnerability
- Cloudflare: 419 events in the last 90 days
- Previous: earlier the same day · How Commerce.com and Cloudflare are getting storefronts ready for AI agents
What happened
Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell . The vulnerabilities affect all web servers running PHP 5.4 or later and they may allow an attacker to cause denial of service, remote code execution, and data exposure when an application processes specially crafted HTTP traffic. Cloudflare has been part of a coordi…
Summary assembled by rule from the sources below
Why it's spreading
Timeline
- First appeared on Cloudflare BlogCloudflare Blog
- Discussion started on Hacker NewsHacker News