[Tencent Cloud Releases Risk Advisory on PHP 'php2shell' Remote Code Execution Vulnerability] According to Deep Tide TechFlow, on October 21, Tencent Cloud Security Center detected that PHP has been disclosed to contain remote code execution vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, codenamed 'php2shell.' These vulnerabilities could allow unauthenticated remote attackers to send specially crafted multipart POST requests, triggering memory corruption and ultimately achieving remote code execution, thereby fully compromising the server and causing other damages. Tencent Cloud Security recommends promptly conducting a security self-check. If you fall within the affected scope, please update and patch immediately to prevent intrusion by external attackers.