Wiz and OpenAI's Patch the Planet disclose PHP2Shell critical RCEs in core PHP
CVE-2026-109618 and CVE-2026-109619. Decades-old engine bugs. Unauthenticated RCE demos on WordPress, Drupal, and Joomla. Patches shipped 21 October 2026.
Read the piece#rce
One published Frontier piece on this subject — open it below.
1 article · Full archive · Topics
Read this piece
This tag currently points at a single story.
One brief a week.
New releases, then the constraint.