PHP2Shell Vulnerability: How to Protect Your Magento 2 Store

A critical PHP vulnerability has put Magento stores at risk, and attackers are already attempting to exploit it. Sansec have demonstrated unauthenticated remote code execution against Magento 2.4.9, while Cloudflare detected attack traffic before the official security fixes were released. The issue involves two vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively known as PHP2Shell. Both carry a… Read More