affected_products:PHP-CGI × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 1d exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox

huntress.com · há 2h · 6 fontes · 6 atualizações critical

Huntress Rapid Response: Leaked PHP RCE Flaws CVE-2026-109618 and CVE-2026-109619 (php2shell) Ahead of Patch Release

Huntress published a rapid-response advisory on two leaked critical PHP core vulnerabilities, CVE-2026-109618 and CVE-2026-109619, informally named "php2shell". Both are rated CVSS v4.0 9.2 and are publicly described as remote code execution. The details leaked via a removed Hacker News post, and watchTowr confirmed they are real. The PHP…

CVE-2026-109618 CVE-2026-109619