Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Critical PHP2Shell remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 have prompted a rapid industry response including patches from PHP and updates from tech vendors such as Cisco, Red Hat, Ubuntu, AWS, and Google Cloud. Security firms including Palo Alto Networks, Fortinet, Sophos, Broadcom, and CrowdStrike have issued detections, mitigations, and advisories as mass exploitation attempts were observed shortly after patches were released.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 3 sources have reported it between 21 Oct 2026 and 23 Oct 2026.