/
criticity:critical × latest_source_host:olhardigital.com.br × limpar

Resultados

2 casos · pág. 1/1

olhardigital.com.br · critical

Critical unauthenticated PHP flaws force Anatel and Brazilian federal courts to take SEI and other systems offline

Two critical PHP vulnerabilities, reportedly allowing unauthenticated attackers to take control of servers, led Anatel and several Brazilian federal courts (TRF1, TRF4, TRF6) to suspend external access to systems including the Sistema Eletrônico de Informações (SEI). The Brazilian CISC issued an alert on 21 October 2026. GSI instructed fe…

government judiciary
olhardigital.com.br · · 2 fontes · 2 atualizações critical

Two critical decades-old PHP flaws (CVSS 9.2, unauthenticated RCE) found with AI and patched; NSA urges patching or taking sites offline

Two critical vulnerabilities affect PHP, in all versions since PHP 5 (2004). The NSA warned about them on Wednesday 21 October 2026, saying they let attackers reach the server file system or the database used by the web application (techcrunch.com). The PHP Foundation released four updates on 21 October 2026, including PHP 8.5.12. Each fl…

government technology