10-21 PHP2Shell (CVE-2026-109618, CVE-2026-109619): PHP Use-After-Free From zend_bailout() to a 100% Reliable PoC