Cloudflare Pre-Implements Protection Rules for PHP Vulnerabilities, Yet Websites Must Still Promptly Apply Official Patches
6 hour ago / Read about 0 minute
Author:小编   

On October 21, 2026, Cloudflare, a renowned global provider of cloud services and cybersecurity solutions, made an announcement. The company revealed that it had already pre-implemented Web Application Firewall (WAF) protection rules specifically designed to address two critical security vulnerabilities found in the PHP programming language. These vulnerabilities, known as the 'php2shell' flaws, are identified by the CVE numbers CVE-2026-109618 and CVE-2026-109619. If left unchecked, these vulnerabilities have the potential to cause a range of serious issues, including denial-of-service attacks, remote code execution, and the leakage of sensitive data.