Tencent Cloud Security Center said PHP has disclosed remote code execution vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619, under the codename "php2shell." According to the alert, an unauthenticated remote attacker could send a specially crafted multipart POST request to trigger memory corruption and ultimately achieve remote code execution. The issue could lead to full server compromise and related security risks. Tencent Cloud Security Center advised users to carry out security checks as soon as possible and, if their systems fall within the affected scope, apply updates and fixes promptly to reduce the risk of intrusion by external attackers.
According to ChainCatcher, Tencent Cloud Security Center has detected disclosed remote code execution vulnerabilities in PHP, identified as CVE-2026-109618 and CVE-2026-109619, under the codename "php2shell."
The alert said an unauthenticated remote attacker could send a specially crafted multipart POST request to trigger memory corruption and ultimately achieve remote code execution, creating the risk of full server takeover and related damage.
Tencent Cloud Security Center advised users to conduct security self-checks promptly and, if they are within the affected scope, update and patch their systems in time to avoid intrusion by external attackers.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
