About this site
PHP2Shell Fix publishes remediation guidance for CVE-2026-109618 and CVE-2026-109619, and offers consulting for teams who cannot treat a PHP upgrade as a routine package bump. That includes PHP 5.6 and later legacy environments.
The site is independent. It is not operated by the PHP Foundation, the PHP security team, or a Linux distribution. It does not display customer logos, certifications, or response-time promises, because none are configured.
Technical claims are tied to the sources listed on each page and in the resources index. When a vendor had not published a package status in the sources reviewed on 22 October 2026, the page says so.