Critical PHP vulnerabilities put websites at risk.

Two critical vulnerabilities have been disclosed in PHP, identified as CVE-2026-109618 and CVE-2026-109619 (php2shell). These vulnerabilities affect servers running PHP 5.4 or later, a technology widely used in websites and business applications, including WordPress, Drupal, and Magento.
These flaws could lead to server compromise, unauthorized access to sensitive information, and disruption of digital services, impacting organizations’ security, business continuity, and reputation.
CyberSafe + Cloudflare: Additional Protection for Your Digital Assets
Updating PHP is essential to address these vulnerabilities, but it may require time for planning and implementation.
Through Cloudflare solutions, CyberSafe provides an additional layer of protection with the Web Application Firewall (WAF), helping to mitigate risks while the necessary updates are being prepared.
Don’t wait to strengthen your website’s security.
Contact CyberSafe to assess your digital assets’ exposure and identify the most appropriate protection measures.
Learn more about Cloudflare protection: https://blog.cloudflare.com/php-vulnerabilities-waf-protection



