/
data_types_exposed:api_keys × cves:CVE-2026-109618 × limpar

Resultados

2 casos · pág. 1/1

wired.com · · 16 fontes · 18 atualizações critical

PHP2Shell: PHP patches critical RCE flaws CVE-2026-109618 and CVE-2026-109619 after embargo leak; early attacks seen

The PHP security team released emergency fixes on October 21, 2026 (around 14:00 UTC) for two critical unauthenticated remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed php2shell (bleepingcomputer.com, wired.com). Both are rated CVSS v4.0 9.2. Details leaked on October 20 through a deleted Hacker News post, which…

CVE-2026-109618 CVE-2026-109619 government transportation
thehackernews.com · · 4 fontes · 4 atualizações critical

Attackers abuse UpdraftCentral keys stolen in TeamUpdraft breach to backdoor WordPress sites via malicious plugins

Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …

CVE-2026-10795 CVE-2026-111862 CVE-2026-109618 technology