PHP2Shell (CVE-2026-109618/109619): on 21 October 2026 governments, hospitals and hosts across Europe pulled their websites ...