Why Half Your Favourite Gaming Sites Were Down Today: PHP2Shell Explained
Two newly disclosed PHP 0-day RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) are prompting websites and game services worldwide to take systems offline as they rush to patch. With PHP powering huge parts of the web, attackers can potentially run code remotely, and providers like Cloudflare are already reporting early exploitation attempts.