CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to its...