[Tencent Cloud releases PHP "php2shell" remote code execution vulnerability risk notice] On October 21, Tencent Cloud released PHP "php2shell" remote code execution vulnerability risk notice. The notice stated that Tencent Cloud Security Center detected that PHP was disclosed to have remote code execution vulnerabilities. The vulnerability numbers are CVE-2026-109618, CVE-2026-109619, and the code name is "php2shell". Compromises that could allow an unauthenticated, remote attacker to take full control of the server by sending a specially crafted multipart POST request, triggering memory corruption and ultimately remote code execution. In order to avoid business impact, Tencent Cloud Security recommends timely conduct security self-examination. If it is within the affected area, please update and repair it in time to avoid being invaded by external attackers.