3 casos · pág. 1/1
Two critical remote code execution (RCE) vulnerabilities in PHP, rated 9.2/10 and reportedly affecting versions as far back as PHP 5, are expected to be fixed in a security release scheduled for 11:00 (Brasília time) on 21 October 2026. watchTowr describes the flaws as allowing attackers to run commands on affected servers, alter pages an…
Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …
The PHP security team announced an emergency security release for October 21, 2026 at 14:00 UTC, one day earlier than the leaked disclosure date. It addresses two critical flaws, CVE-2026-109618 and CVE-2026-109619 (dubbed php2shell), both rated CVSS v4.0 9.2. Leaked reports cited CVSS 10.0 and an impact reaching back to PHP 5, but PHP ha…
