/
researchers:OpenAI × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

krebsonsecurity.com · critical

Critical PHP zero-days CVE-2026-109618 and CVE-2026-109619 enable RCE and are exploited in the wild, affecting PHP 5.4 and later

PHP released an emergency update for two critical zero-day vulnerabilities, CVE-2026-109618 and CVE-2026-109619. They allow remote code execution, denial of service and data exposure, and are reportedly already being exploited in the wild. Nearly 70 percent of websites are said to need updating, and Reuters reports that government website…

CVE-2026-109618 CVE-2026-109619 government technology
security.paloaltonetworks.com · · 21 fontes · 22 atualizações critical

PHP2Shell: PHP patches critical unauthenticated RCE flaws CVE-2026-109618 and CVE-2026-109619 as exploitation attempts begin

The PHP security team released emergency fixes on October 21, 2026 at 14:00 UTC for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials a…

CVE-2026-109618 CVE-2026-109619 government transportation