Neutralizing PHP2Shell: Stopping Critical PHP RCEs with VMware vDefend and Avi WAF

Curated·Broadcom Advocacy

The global threat landscape shifted dramatically today following the disclosure of PHP2Shell, a pair of critical Remote Code Execution (RCE) vulnerabilities tracked as CVE-2026-109618 (OOM memory corruption) and CVE-2026-109619 (stale global state). Both carry a CVSS score of 9.2 and affect [...]

Read the original article

Opens on the original publisher's site. Copyright remains with the original author.