SecurityPHP2Shell Explained: How Two PHP Bugs Knocked Websites Offline Worldwide (CVE-2026-109618 & CVE-2026-109619)
In October 2026, two bugs deep inside PHP — the language behind most of the web — pushed governments, hospitals and businesses to pull their websites offline. Here's what PHP2Shell actually is, how the memory bugs work in plain English, why it caused so much chaos, and exactly how to check and patch your servers.