php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

You Fixed Log4j. So Why...

The patch went out. The ticket closed. The post-mortem was filed. And yet, more than four years later, scanners keep flagging it. This is about the gap between “patched” and...