From React2Shell to PHP2Shell and GitLab: October 2026's Wave of Critical RCE Attacks
PHP, Node.js and GitLab all shipped emergency RCE patches in October 2026, and PHP2Shell and a GitLab file-read flaw are already exploited in the wild. Here is what happened, how to check your exposure and what to patch today.

