技術實踐PHP2Shell (CVE-2026-109618/109619): How We Virtual-Patched It at the Edge
Two critical PHP advisories allow unauthenticated RCE through an OOM bailout and stale global state. Here is how the bugs work, what Yeap WAF blocks at the edge on day one, and what you still need to fix on your origin.
YCYeap Cloud Security··9 分鐘閱讀
