security

PHP2Shell and Your Business Tools: What a Critical Web Flaw Means for Your Data

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) is a critical, actively exploited flaw in PHP itself — the language running much of the web. Here is what it means if you are not a developer, the five questions to ask any vendor that holds your data, and why tally5 does not run on PHP. No exploit details — just how to patch and protect.