3 casos · pág. 1/1
The PHP security team published an advance notice on October 20, 2026 for a release at 14:00 UTC on October 21 that fixes two vulnerabilities, each rated CVSS v4.0 9.2. watchTowr reports them as two possible remote code execution flaws, CVE-2026-109618 and CVE-2026-109619. Its report is unverified, and PHP has not confirmed the identifier…
F5 Labs analyzed exploitation of CVE-2026-24423, a CVSS 9.8 unauthenticated remote code execution flaw in SmarterTools SmarterMail (CWE-306). CISA added it to the KEV catalog on February 2, 2026 and notes it has been used in ransomware campaigns. Despite public write-ups, F5 sensors saw only one IP, 193.24.123.58 (ASN 200593, Russian ISP …
CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …
