Search Archive

Search 6 months of cybersecurity articles across all feeds

15 resultsfor “CVE-2026-109618”

VULNcriticalCVE-2026-1096189.8 CRITICALPalo Alto Unit 4216 days ago

Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619

CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CM…

VULNhighCVE-2026-1096189.8 CRITICALExploit-DB16 days ago

[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

GOVcriticalCVE-2026-1096189.8 CRITICALSANS Internet Storm Center16 days ago

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)

PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread u…

NEWShighCVE-2026-1096189.8 CRITICALHackread10 days ago

CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch

The US Cybersecurity and Infrastructure Security Agency (CISA) added two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619,…

NEWShighCVE-2026-1096189.8 CRITICALSecurity Magazine11 days ago

PHP2Shell Exploited in the Wild

PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been exploited in the wild.

NEWShighCVE-2026-1096189.8 CRITICALBleeping Computer11 days ago

PHP2Shell security flaws now sucessfully exploited in the wild

Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully…

NEWShighCVE-2026-1096189.8 CRITICALThe Hacker News12 days ago

PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking

Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the…

NEWShighCVE-2026-1096189.8 CRITICALThe Hacker News15 days ago

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infect…

NEWScriticalCVE-2026-1096189.8 CRITICALBleeping Computer16 days ago

PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-1…

GOVcriticalCVE-2026-1096189.8 CRITICALCISA Current Activity16 days ago

Critical Vulnerabilities in PHP Require Immediate Patching

CISA strongly urges organizations to immediately patch the recently disclosed critical vulnerabilities in PHP, CVE-2026-109618 and…

NEWScriticalCVE-2026-1096189.8 CRITICALSecurityWeek17 days ago

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post…

GOVhighCVE-2026-1096189.8 CRITICALCISA Current Activity11 days ago

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog and updated the PHP Alert, Critical Vu…

VULNhighCVE-2026-1096189.8 CRITICALFull Disclosure11 days ago

CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

Posted by jose on Oct 27 CVE-2026-109618: Pointer underflow in PHP's CGI SAPI enables unauthenticated remote code execution. Affe…

VULNhighCVE-2026-1096189.8 CRITICALFull Disclosure9 days ago

Re: CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

Posted by fulldisclosure on Oct 28 Am 21.10.26 um 07:23 schrieb jose: that is the CVE for the OOM RCE vulnerability in fpm and mo…

NEWShighCVE-2026-1096189.8 CRITICALThe Hacker News11 days ago

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched P…