PHP2Shell: Find and Patch Every PHP Server You Run (2026)

PHP2Shell (CVE-2026-109618, CVE-2026-109619) allows unauthenticated RCE in core PHP. How to find every affected server, patch it, and check for exploitation.