PHP 5.4 – 8.1
criticalCVSS 9.2
PHP2Shell variant affecting older PHP branches that still expose the upload progress session handler.
Dampak
Unauthenticated code execution on any host running an unpatched legacy PHP branch.
Perbaikan
Move to a supported branch (8.2.35+ / 8.3.36+ / 8.4.27+ / 8.5.12+). Legacy branches receive no fix.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2026-109618Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2026-109618.
Jalankan audit gratis