Get Started

Security Update on PHP2Shell: Impact for Docker Customers

SecuritySecurityProgramming Languages & Compilers

First reported · 36h ago · 1 source

Crest summary — written by AI from the 1 source below; every figure is checked against them · model deepseek-flash

Summary

Docker began tracking two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell, on Tuesday, October 20, 2026.

Key facts

  • Docker said it started tracking the vulnerabilities on October 20, 2026.
  • The two flaws are tracked as CVE-2026-109618 and CVE-2026-109619.
  • The vulnerabilities are commonly called PHP2Shell.

Why it matters

Teams running PHP workloads, including in Docker environments, face two critical flaws that Docker is now tracking, so they should check their exposure to PHP2Shell.

Companies

Technologies

Related on Crest

Matched by rule, not by AI: a repository linked in the coverage, or a technology or company in this event that Crest tracks.

Packages

Original sources (1)

The report this event was built from. Crest of Tech keeps no article bodies: the full text is at each source.

  1. DockerOfficial · Primary
    Security Update on PHP2Shell: Impact for Docker Customers · By PeiFang Sung
    Read at Docker
Security Update on PHP2Shell: Impact for Docker Customers — Crest of Tech