PHP2Shell (CVE-2026-109618/19): Broadcom & VMware Impact & Mitigation
October 21, 2026: PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 require urgent PHP updates. Review fixed versions, official Broadcom product-assessment links, and the limits of WAF-based protection.