Tencent Cloud Releases Risk Advisory for PHP "php2shell" Remote Code Execution Vulnerability

Tencent Cloud has released a risk advisory regarding the PHP "php2shell" remote code execution vulnerability. According to the advisory, Tencent Cloud Security Center has detected that PHP has been disclosed to contain remote code execution vulnerabilities, identified as CVE-2026-109618 and CVE-2026-109619, codenamed "php2shell." These vulnerabilities could allow unauthenticated remote attackers to send specially crafted multipart POST requests, triggering memory corruption and ultimately achieving remote code execution, thereby fully compromising the server and causing other damages. To prevent business impact, Tencent Cloud Security recommends promptly conducting security self-checks. If within the affected scope, please update and patch immediately to avoid intrusion by external attackers.