researchers:VulnCheck × has_exploit:true × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 3d exploit público critical

F5 Labs observes lone Russian IP scanning for SmarterMail CVE-2026-24423 unauthenticated RCE, a CISA KEV-listed flaw used in ransomware

F5 Labs analyzed exploitation of CVE-2026-24423, a CVSS 9.8 unauthenticated remote code execution flaw in SmarterTools SmarterMail (CWE-306). CISA added it to the KEV catalog on February 2, 2026 and notes it has been used in ransomware campaigns. Despite public write-ups, F5 sensors saw only one IP, 193.24.123.58 (ASN 200593, Russian ISP …

CVE-2026-24423 CVE-2026-20128 CVE-2017-9841

thehackernews.com · há 1h · 28 fontes · 43 atualizações exploit público critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; mass exploitation attempts, Potassium Mirai botnet, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

CVE-2026-109618 CVE-2026-109619 government transportation