/
attack_type:vulnerability × victim_sectors:education × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 3 fontes · 3 atualizações critical

Drupal discloses critical Field UI RCE flaw CVE-2026-108097 exploitable via contributed modules, including an unauthenticated path

Drupal published an advisory on October 14, 2026 for CVE-2026-108097, a critical remote code execution vulnerability in the Field UI module (fieldui) of Drupal core. The advisory gives it a risk score of 19/25, with basic attack complexity, no authentication required, and full confidentiality and integrity impact. Drupal core alone is not…

CVE-2026-108097 CVE-2026-108099 CVE-2026-108515 government education
theregister.com · · 27 fontes · 37 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; broad exploitation attempts, UK government services offline, wide vendor and government response

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation