PHP2Shell in OT Sites: Why the Vulnerability Will Linger for Years

PHP2Shell (CVE-2026-109618/-109619, CVSS 9.2) is under broad attack. Which OT devices run PHP, why patching takes years, and what to do now.