/
attack_type:remote_code_execution × victim_sectors:judiciary × victim_sectors:telecommunications × limpar

Resultados

2 casos · pág. 1/1

olhardigital.com.br · critical

Two critical unauthenticated PHP flaws force Anatel and Brazilian courts to suspend systems including SEI

Two serious PHP vulnerabilities, reportedly allowing attackers to take control of servers without credentials, led Anatel and Brazilian courts to temporarily suspend access to their systems, including the Sistema Eletrônico de Informações (SEI). The Brazilian federal government issued an alert urging public bodies to update the software. …

government telecommunications
olhardigital.com.br · · 2 fontes · 3 atualizações critical

Critical unauthenticated PHP flaws (CVSS 9.2) found with AI and patched; NSA urges patching; Brazil, France take sites offline

Two critical vulnerabilities affect PHP, in all versions since PHP 5 (2004). The NSA warned about them on Wednesday 21 October 2026, saying they let attackers reach the server file system or the database used by the web application (techcrunch.com). The PHP Foundation released four updates on 21 October 2026, including PHP 8.5.12. Each fl…

government technology