Critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
ServerPilot has updated PHP on all servers for the two critical PHP vulnerabilities known as PHP2Shell. These vulnerabilities allow unauthenticated remote code execution and affect all PHP versions, including end-of-life PHP versions that no longer receive official updates.