/
data_types_exposed:credentials × latest_source_host:securityaffairs.com × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · high

Unpatched 16-year-old Broadcom Wi-Fi WPS flaw enables unauthenticated RCE on routers, affecting 1.5M+ gateways in Belgium

Researcher Quentin Kaiser presented at Hexacon a vulnerability in Broadcom's proprietary 802.11 implementation, present in its SDK since at least 2010, that gives an attacker within Wi-Fi range unauthenticated remote code execution on affected routers without the network key or WPS enrollment. An incomplete patch was silently released in …

telecommunications consumer_electronics
securityaffairs.com · · 27 fontes · 36 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619; exploitation attempts seen from Oct 17, broad exploitation after patches, wide vendor and government response

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation