PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619)

Two unauthenticated RCE flaws in PHP, with exploitation attempts reported. Who is affected, how to check, and the fixed versions: 8.5.12, 8.4.27, 8.3.36, 8.2.35.