countries_code:US × criticity:critical × victim_sectors:media × limpar

Resultados

2 casos · pág. 1/1

olhardigital.com.br · há 19h · 2 fontes · 3 atualizações critical

Critical unauthenticated PHP flaws (CVSS 9.2) found with AI and patched; NSA urges patching; Brazil, France take sites offline

Two critical vulnerabilities affect PHP, in all versions since PHP 5 (2004). The NSA warned about them on Wednesday 21 October 2026, saying they let attackers reach the server file system or the database used by the web application (techcrunch.com). The PHP Foundation released four updates on 21 October 2026, including PHP 8.5.12. Each fl…

government technology

gbhackers.com · há 1h · 28 fontes · 44 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation