cves:CVE-2026-109619 × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · há 2min · 9 fontes · 9 atualizações critical

PHP schedules emergency release for php2shell flaws CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2 RCE) after details leaked

The PHP security team announced an emergency security release for October 21, 2026 at 14:00 UTC, one day earlier than the leaked disclosure date. It addresses two critical flaws, CVE-2026-109618 and CVE-2026-109619 (dubbed php2shell), both rated CVSS v4.0 9.2. Leaked reports cited CVSS 10.0 and an impact reaching back to PHP 5, but PHP ha…

CVE-2026-109618 CVE-2026-109619

thehackernews.com · há 3h · 4 fontes · 4 atualizações critical

Attackers abuse UpdraftCentral keys stolen in TeamUpdraft breach to backdoor WordPress sites via malicious plugins

Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …

CVE-2026-10795 CVE-2026-111862 CVE-2026-109618 technology