/
affected_products:Magento × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

patchstack.com · critical

Critical PHP RCE flaw under active exploitation after leak; WordPress, Drupal, Magento, Laravel exposed, patch due Oct 21

Patchstack reports a critical remote code execution vulnerability in PHP that is already being actively exploited after details leaked on October 20. Because the flaw sits in the language runtime, any PHP-based application on a vulnerable version is exposed, including WordPress, Drupal, Magento, Joomla and Laravel sites. Patchstack confir…

securityaffairs.com · · 9 fontes · 9 atualizações critical

PHP schedules emergency release for php2shell flaws CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 RCE) after details leaked

The PHP security team announced an emergency security release for October 21, 2026 at 14:00 UTC, one day earlier than the leaked disclosure date. It addresses two critical flaws, CVE-2026-109618 and CVE-2026-109619 (dubbed php2shell), both rated CVSS v4.0 9.2. Leaked reports cited CVSS 10.0 and an impact reaching back to PHP 5, but PHP ha…

CVE-2026-109618 CVE-2026-109619