/
attack_type:information_disclosure × latest_source_host:wired.com × criticity:critical × limpar

Resultados

1 casos · pág. 1/1

wired.com · · 14 fontes · 16 atualizações critical

PHP2Shell: PHP releases emergency fixes for critical RCE flaws CVE-2026-109618 and CVE-2026-109619 after leak; early attacks reported

The PHP security team released emergency patches on October 21, 2026, at about 14:00 UTC for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell (bleepingcomputer.com). Both are rated CVSS v4.0 9.2. Fixed versions are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, with minimal source …

CVE-2026-109618 CVE-2026-109619 government transportation