CVE-2026-109619: UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja

SPOJENO PŘES CVE UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja

PHP Security Team najavio je izvanrednu sigurnosnu zakrpu zakazanu za 21. listopad 2026. u 16:00 sati (14:00 UTC). Pozivaju sve PHP korisnike na hitnu primjenu zakrpi. Prije službene objave procurile su informacije o dvjema kritičnim ranjivostima u jezgri PHP-a koje napadaču putem web zahtjeva omogućuju preuzimanje poslužitelja. Uspješno iskorištavanje ranjivosti napadaču omogućava izvršavanje proizvoljnog programskog koda (engl. remote code execution – RCE) bez autentifikacije. Radi se o…

CVSS 9.2 CVE-2026-109618 CVE-2026-109619 PHP HR SK US BE

tg: zranitelnost tg: rozbor tg: návod tg: propagace

21. 10. 2026 12:00 · CERT.hr · UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja 21. 10. 2026 10:09 · SK-CERT (NBÚ SR) · Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a 21. 10. 2026 06:00 · Huntress · Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) 21. 10. 2026 04:59 · Qualys · PHP Announces Critical Security Release for Two Vulnerabilities 21. 10. 2026 03:54 · Aikido Security · What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) 20. 10. 2026 22:56 · BleepingComputer · PHP warns admins of two critical flaws, emergency patches coming tomorrow

php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches. Key takeaways CVE-2026-109618 and CVE-2026-109619 are critical vulnerabilities in PHP, both rated CVSSv4.0 9.2 by the PHP security team. Public reporting describes both as remote code execution vulnerabilities. watchTowr says it believes it has reproduced CVE-2026-109618, and Cloudflare CTO Dane Knecht says the company is seeing…

KEV ✓ · ransomware EPSS 1.00 CVSS 10.0 CVE-2012-1823 CVE-2019-11043 CVE-2024-4577 CVE-2026-109618 CVE-2026-109619 PHP US

tg: zneužíváno tg: zranitelnost

21. 10. 2026 11:01 · Tenable Research · php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities