/
initial_access_vector:exploit_public_facing × criticity:critical × latest_source_host:sentinelone.com × limpar

Resultados

2 casos · pág. 1/1

sentinelone.com · · 22 fontes · 23 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619 as exploitation attempts begin

The PHP security team released emergency fixes on October 21, 2026 at 14:00 UTC for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials a…

CVE-2026-109618 CVE-2026-109619 government transportation
sentinelone.com · critical

Atlassian Data Center CVE-2026-21589 exploited within hours of PoC; BitB phishing targets AI ad portals; ShinyHunters member arrested

This SentinelOne weekly roundup (Week 41, 2026) covers law enforcement actions, a phishing campaign and an actively exploited vulnerability. The most urgent item is CVE-2026-21589, a critical (CVSS 9.3) unauthenticated arbitrary file access flaw in Atlassian Data Center products. Exploitation attempts began about two hours after a public …

CVE-2026-21589 ShinyHunters technology advertising