3. 11. 2026 · zachyceno 04:30
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-109618, CVE-2026-109619, Summary: This Security Alert addresses CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as PHP2Shell, allow for unauthenticated remote code execution in PHP. Oracle strongly recommends that customers apply the available security patches without delay. The Security Alert advisory will continue to be updated as additional product patches become…
KEV ✓
EPSS 1.00
CVSS 9.8
CVE-2026-109618
CVE-2026-109619
Oracle
NetApp
Festo
Apache
PHP
WAGO
Belden
QNAP
Synology
ESET
Welotec
Juniper Networks
HPE
METTLER TOLEDO
Citrix
Cloud Software Group
Palo Alto Networks
Tenable
Splunk
Cisco
WordPress
Drupal
Joomla
výroba a průmysl
školství
FI
FR
DE
IT
BE
US
SK
CZ
CA
RU
NL
AT
SE
HR
GB
tg: zneužíváno
tg: zranitelnost
tg: rozbor
tg: novinka v produktu
tg: návod
tg: propagace
tp: malware
tp: phishing
tp: dodavatelský řetězec
tp: AI
tp: průmyslové systémy
3. 11. 2026 · zachyceno 04:30 · NCSC-FI · Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619
3. 11. 2026 · zachyceno 15:30 · CERT-FR – avis · Multiples vulnérabilités dans NetApp ONTAP 9 (03 novembre 2026)
2. 11. 2026 12:00 · CERT@VDE · Two critical PHP vulnerabilities in several Festo Didactic products
30. 10. 2026 12:32 · CSIRT Itálie (ACN) · ESET: aggiornamenti e mitigazioni per le vulnerabilità "PHP2Shell"
26. 10. 2026 23:15 · Aikido Security · How to patch PHP2Shell with free Aikido Images
26. 10. 2026 20:48 · Tenable Research · Discover and remediate PHP2Shell exposure with Tenable
26. 10. 2026 14:25 · ESET WeLiveSecurity · PHP2Shell: What to know about two critical PHP flaws
26. 10. 2026 10:19 · BleepingComputer · PHP2Shell security flaws now sucessfully exploited in the wild
26. 10. 2026 05:31 · Qualys · Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own
22. 10. 2026 10:00 · CSIRT.CZ – novinky · Kritické zranitelnosti PHP umožňují vzdálené spuštění kódu
22. 10. 2026 · zachyceno 21:30 · Splunk Advisories · SVD-2026-1013: Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026
21. 10. 2026 21:12 · Cisco PSIRT · Vulnerabilities in PHP Affecting Cisco Products: October 2026
21. 10. 2026 19:30 · Cyber Centre Kanada · AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619
21. 10. 2026 18:14 · Malwarebytes Labs · PHP2Shell: Why websites are going offline for emergency security updates
21. 10. 2026 18:00 · Palo Alto PSIRT · CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)
21. 10. 2026 17:18 · Securelist (Kaspersky) · Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
21. 10. 2026 17:10 · Cisco Talos · Two critical RCEs in PHP core
21. 10. 2026 17:03 · NÚKIB · Upozornění na "php2shell", dvě kritické zranitelnosti v PHP
21. 10. 2026 16:01 · NCSC-NL · NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP
21. 10. 2026 15:49 · CERT.at · Kritische Sicherheitslücken in PHP - Updates verfügbar
21. 10. 2026 15:40 · Palo Alto Unit 42 · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
21. 10. 2026 14:44 · SANS Internet Storm Ctr. · Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st)
21. 10. 2026 · zachyceno 18:00 · CISA Advisories · Critical Vulnerabilities in PHP Require Immediate Patching
21. 10. 2026 14:00 · CERT-SE · Kritiska sårbarheter i PHP
21. 10. 2026 12:00 · CERT.hr · UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja
21. 10. 2026 10:09 · SK-CERT (NBÚ SR) · Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a
21. 10. 2026 · zachyceno 21:30 · Fortinet PSIRT · PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
21. 10. 2026 06:00 · Huntress · Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
21. 10. 2026 · zachyceno 17:30 · Elastic Security · php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619
21. 10. 2026 · zachyceno 15:01 · Sophos Threat Research · Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
20. 10. 2026 10:30
[VDE-2026-112] A vulnerability identified as CVE-2026-10109 affects the external component IBM Db2 12.1.2 delivered with STARe v20.00. The vulnerability is associated with improper handling of the pre-authentication DRDA handshake in affected IBM Db2 versions
EPSS 0.01
CVE-2026-10109
METTLER TOLEDO
IBM
DE
tg: zranitelnost
tp: dodavatelský řetězec
20. 10. 2026 10:30 · CERT@VDE · METTLER TOLEDO: STARe Software DB2 vulnerable component
10. 9. 2026 12:00
[VDE-2026-088] The vulnerabilities found in LabX Standard versions 21.3.22 - 21.4.23 are CVE-2025-69419, CVE-2026-0915, CVE-2025-15467, CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Standard v21.4.25. The vulnerabilities found in LabX Enterprise versions 21.3.22 - 21.4.23 are CVE-2026-4800, CVE-2026-33186, CVE-2026-39821, CVE-2026-33671 and are fixed in LabX Enterprise v21.4.25 All other vulnerabilities are to be fixed in the upcoming releases.
EPSS 0.75
CVE-2025-15467
CVE-2025-69419
CVE-2026-0915
CVE-2026-33186
CVE-2026-33671
CVE-2026-39821
CVE-2026-4800
METTLER TOLEDO
DE
tg: zranitelnost
tp: dodavatelský řetězec
10. 9. 2026 12:00 · CERT@VDE · METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4
14. 7. 2026 12:00
[VDE-2026-066] This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.
EPSS 0.01
CVE-2026-23673
CVE-2026-25171
CVE-2026-25172
CVE-2026-25174
CVE-2026-25175
CVE-2026-25179
CVE-2026-25181
CVE-2026-25185
CVE-2026-26111
CVE-2026-26128
METTLER TOLEDO
Microsoft
DE
tg: zranitelnost
tg: novinka v produktu
14. 7. 2026 12:00 · CERT@VDE · METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
9. 6. 2026 12:00
[VDE-2026-064] Multiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases. Notice: LabX Standard was formerly known as LabX Cloud Local.
EPSS 0.75
CVE-2025-15467
CVE-2025-58187
CVE-2025-69419
CVE-2026-0915
METTLER TOLEDO
DE
tg: zranitelnost
9. 6. 2026 12:00 · CERT@VDE · METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
26. 5. 2026 12:00
[VDE-2026-053] Titration software versions prior to 2.0.2.6 are affected by libpng vulnerabilities CVE-2026-33416 and CVE-2026-33636.
EPSS 0.01
CVE-2026-33416
CVE-2026-33636
METTLER TOLEDO
DE
tg: zranitelnost
26. 5. 2026 12:00 · CERT@VDE · METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnerabilities
23. 4. 2026 12:00
[VDE-2026-029] MX/MR firmware V2.0.0 or earlier is affected by the OpenSSL vulnerability CVE-2025-15467.
EPSS 0.52
CVE-2025-15467
METTLER TOLEDO
OpenSSL
DE
tg: zranitelnost
23. 4. 2026 12:00 · CERT@VDE · METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances