For context, in case anyone is unaware, there was a CVE reported this morning: https://nvd.nist.gov/vuln/detail/cve-2026-109618

Or, I just saw that a whole domain was registered to explain it: https://www.php2shell.com/