php2shell Patches Archives - TuxCare

Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

php2shell Patches

php2shell Patches Now Available for...

Key Takeaways php2shell is the name for two critical PHP core RCE flaws, CVE-2026-109618 and CVE-2026-109619. PHP fixed them in 8.5.12, 8.4.27, 8.3.36 and 8.2.35, but end-of-life branches get no...