Defend Against PHP2Shell RCE with AWS WAF
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated remote code execution on unpatched servers. Learn how to use AWS WAF rules as a temporary shield while you patch your PHP runtime.
source: [aws/security-blog]