Critical PHP vulnerabilities: What you need to know and do
Security status update for Layershift customers
Last updated: 27 October 2026, 19:22
What happened?
On 21 October, the PHP development team released emergency fixes for two critical vulnerabilities (php2shell), CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10.
22nd Oct 2026
