CVE-2026-109618
PHP2Shell: Why Patching Means Restarting Every PHP Worker
PHP2Shell (CVE-2026-109618/109619) breaks PHP's request lifecycle via OOM and stale state. What changed, which versions fix it, and how to verify.
Topic
PHP security
A collection of essays to explore, one idea at a time.