Security updates are available for CVE-2026-109618 and CVE-2026-109619 (php2shell), two critical vulnerabilities affecting PHP that could allow unauthenticated remote code execution.
Canonical has released fixes for all affected supported Ubuntu releases. Users should update affected systems as soon as possible.
Learn more and review update instructions: https://t.co/x5WDZuJmxb
#Ubuntu #Security #CVE
— Ubuntu (@ubuntu) October 23, 2026