/
attack_type:vulnerability_disclosure × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · · 9 fontes · 9 atualizações critical

PHP schedules emergency release for php2shell flaws CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 RCE) after details leaked

The PHP security team announced an emergency security release for October 21, 2026 at 14:00 UTC, one day earlier than the leaked disclosure date. It addresses two critical flaws, CVE-2026-109618 and CVE-2026-109619 (dubbed php2shell), both rated CVSS v4.0 9.2. Leaked reports cited CVSS 10.0 and an impact reaching back to PHP 5, but PHP ha…

CVE-2026-109618 CVE-2026-109619
thezdi.com · critical

Microsoft October 2026 Patch Tuesday: record 1,415 CVEs, one exploited Windows Shell zero-day, plus 174 Adobe fixes

Microsoft's October 2026 Patch Tuesday is a record release of roughly 1,415 new CVEs, the first four-digit volume ever, larger than any previous full year of Microsoft patches. Only one flaw is under active attack: CVE-2026-96951, a Windows Shell security feature bypass that evades Mark of the Web (MotW) protections. Two others are public…

CVE-2026-96951 CVE-2026-108398 CVE-2026-92707