Post

InfoSec@infosec.skyfleet.blue

Re: PHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618)

seclists.orgoss-sec: Re: PHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618)Posted by Michael Orlitzky on Oct 26 Considering that PHP 5.x has been out of security support for ~8 years and out of active support for ~10, best of all would be to crash the process when it starts. For many of those years, there existed no AI marketing departments to publicize individual vulnerabilities. No one knows how, but hundreds of vulnerabilities were nevertheless fixed during that time.