BTHS Wiki is temporarily offline while we apply an emergency security update.
Two critical remote code execution vulnerabilities in PHP have been disclosed:
CVE-2026-109618 — RCE via out-of-memory corruption (CVSS 9.2)
CVE-2026-109619 — RCE via stale global state / use-after-free (CVSS 9.2)
All PHP versions from 5.4 through 8.5.11 are affected. These are collectively known as PHP2Shell.
We'll be back once the patch is available and applied. See php.net/security for details.
bths.wiki