PHP2SHELL and Two Microsoft CVSS 10.0 Vulnerabilities
PHP2SHELL and Two Microsoft CVSS 10.0 Vulnerabilities
On 22 October 2026, three critical security events converged: two maximum-severity PHP vulnerabilities allowing unauthenticated remote code execution, and two separate Microsoft Azure flaws each scoring CVSS 10.0. For UK small businesses running WordPress, WooCommerce, or using Microsoft 365 and Azure services, these are not theoretical risks. They are immediate patch obligations with Cyber Essentials compliance timelines already running. This episode walks through the technical detail of CVE-2026-1096118 and CVE-2026-1096119 (the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.