PHP2Shell

[mjmouse]

https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching
https://watchtowr.com/intelligence/php-cve-2026-109618-faq/
https://en.wikipedia.org/wiki/PHP2Shell

I don't actually use php generally myself (I have Lua for all my cgi needs), but it might be good to remove or update the extensions in the repos. tc 17.x x86_64 has extensions for 8.1 through 8.5 provided by andyj, all of which will be vulnerable.