affected_products:php-cgi × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 2d exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox

sentinelone.com · há 3h · 22 fontes · 23 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619 as exploitation attempts begin

The PHP security team released emergency fixes on October 21, 2026 at 14:00 UTC for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials a…

CVE-2026-109618 CVE-2026-109619 government transportation