PHP2Shell (CVE-2026-109618 and CVE-2026-109619): How to Protect Magento, Adobe Commerce and PHP Stores
PHP released emergency fixes for two critical flaws, CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell. Here is who is affected and how to patch Magento, Adobe Commerce, WooCommerce and other PHP stores.