PHP2Shell (CVE-2026-109618 and CVE-2026-109619) critical PHP vulnerabilities: What UK organisations need to know
Two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, allow remote code execution without a login. See affected versions, fixes and what to do now.
Supplier attacks, a record 966 Microsoft patches and a WordPress flaw exploited in under five hours: the September 2026 cyber news UK organisations need.