PUBLIC NOTICE - URGENT ADVISORY: CRITICAL PHP2SHELL VULNERABILITIES REQUIRE IMMEDIATE PATCHING

Dear Stakeholders,
The Botswana National Computer Security Incident Response Team (CSIRT) issues this urgent advisory regarding two critical vulnerabilities in the PHP runtime, identified as CVE-2026- 109618 and CVE-2026-109619, collectively referred to as PHP2Shell. These vulnerabilities affect PHP- based websites, portals and applications and may expose organisations to remote code execution and sensitive information disclosure...READ MORE