AI & Enterprise
Theori releases analysis and emergency response steps for PHP2Shell flaws
AI-based offensive cybersecurity company Theori said on Oct. 22 it reproduced and verified the recently disclosed PHP engine vulnerabilities PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and released an emergency response guide for companies and institutions. The bugs allow unauthenticated remote code execution or memory reading. The company said the flaws score 9.2 on CVSS v4.0. Affected versions include multiple PHP 8.x releases and all unsupported versions.
