3 casos · pág. 1/1
Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…
GitLab released critical patch versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 and 18.11.13 for GitLab CE/EE on October 21, 2026. The release fixes CVE-2026-110264, an integer overflow in the regular expression compiler that could allow an unauthenticated user to execute arbitrary code on the GitLab server (CVSS 10.0). It affects…
The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…
