/
attack_type:vulnerability_exploitation × victim_sectors:media × limpar

Resultados

2 casos · pág. 1/1

olhardigital.com.br · · 2 fontes · 2 atualizações critical

Two critical decades-old PHP flaws (CVSS 9.2, unauthenticated RCE) found with AI and patched; NSA urges patching or taking sites offline

Two critical vulnerabilities affect PHP, in all versions since PHP 5 (2004). The NSA warned about them on Wednesday 21 October 2026, saying they let attackers reach the server file system or the database used by the web application (techcrunch.com). The PHP Foundation released four updates on 21 October 2026, including PHP 8.5.12. Each fl…

government technology
blog.checkpoint.com · critical

PHP2Shell: CVE-2026-109618 and CVE-2026-109619 PHP RCE flaws actively exploited, hitting 10% of organizations worldwide

Check Point Research reports active exploitation of two critical PHP engine vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively called PHP2Shell. Details leaked ahead of planned disclosure, and screenshots of a PHP2Shell attack tool are circulating. Since the leak, 10% of organizations worldwide have been "impacted", meanin…

CVE-2026-109618 CVE-2026-109619 telecommunications education