CoinGape·
Crypto Firms Say They Don’t Use PHP After Critical PHP2Shell Flaw
21 outlets reporting
9.2
vulnerability severity score
Two critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have sent shockwaves through crypto and broader web security circles. Both carry a CVSS 9.2 severity rating. They enable unauthenticated remote code execution on…