attack_type:vulnerability × cves:CVE-2026-109618 × limpar

Resultados

2 casos · pág. 1/1

cert.ssi.gouv.fr · há 4h high

CERT-FR flags multiple PHP vulnerabilities enabling remote code execution, fixed in 8.2.35, 8.3.36, 8.4.27 and 8.5.12

CERT-FR advisory CERTFR-2026-AVI-1359 reports multiple vulnerabilities in PHP that allow an attacker to achieve remote arbitrary code execution. The flaws are addressed in the PHP security bulletins of 21 October 2026. All 8.0.x and 8.1.x versions are listed as affected, and since the advisory names no fixed release for these branches, th…

CVE-2026-109618 CVE-2026-109619

theregister.com · há 2h · 27 fontes · 37 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; broad exploitation attempts, UK government services offline, wide vendor and government response

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation