/
ttps_attack:T1190 × latest_source_host:tenable.com × limpar

Resultados

2 casos · pág. 1/1

tenable.com · · 28 fontes · 42 atualizações critical

PHP2Shell: critical PHP RCE flaws CVE-2026-109618/109619 patched; broad exploitation attempts, European sites offline

The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…

tenable.com · exploit público high

Microsoft October 2026 Patch Tuesday fixes 1,407 CVEs, including Windows Shell MOTW bypass zero-day CVE-2026-96951 exploited in the wild

Microsoft's October 2026 Patch Tuesday addresses 1,407 CVEs across 301 products and components, the largest release on record for the second consecutive month. 69 are rated critical, 1,337 important and 1 low. Two zero-days are fixed: CVE-2026-96951, a Windows Shell security feature bypass exploited in the wild, and CVE-2026-108398, a .NE…