VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: Synology× typ: zranitelnost× v celém archivu zrušit filtry

5 karet z 6 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

· zachyceno

SPOJENO PŘES CVE Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-109618, CVE-2026-109619, Summary: This Security Alert addresses CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as PHP2Shell, allow for unauthenticated remote code execution in PHP. Oracle strongly recommends that customers apply the available security patches without delay. The Security Alert advisory will continue to be updated as additional product patches become…

KEV ✓ EPSS 1.00 CVSS 9.8 CVE-2026-109618 CVE-2026-109619 Oracle Festo Apache PHP WAGO Belden QNAP Synology ESET Welotec Juniper Networks HPE METTLER TOLEDO Citrix Cloud Software Group Palo Alto Networks Tenable Splunk Cisco WordPress Drupal Joomla výroba a průmysl školství FI DE FR IT BE US SK CZ CA RU NL AT SE HR GB

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tg: návod tg: propagace tp: malware tp: phishing tp: dodavatelský řetězec tp: AI tp: průmyslové systémy

· zachyceno · NCSC-FI · Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619 · CERT@VDE · Two critical PHP vulnerabilities in several Festo Didactic products · zachyceno · CERT-FR – avis · Multiples vulnérabilités dans macmon et NRSW (02 novembre 2026) · CSIRT Itálie (ACN) · ESET: aggiornamenti e mitigazioni per le vulnerabilità "PHP2Shell" · Aikido Security · How to patch PHP2Shell with free Aikido Images · Tenable Research · Discover and remediate PHP2Shell exposure with Tenable · ESET WeLiveSecurity · PHP2Shell: What to know about two critical PHP flaws · BleepingComputer · PHP2Shell security flaws now sucessfully exploited in the wild · Qualys · Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own · CSIRT.CZ – novinky · Kritické zranitelnosti PHP umožňují vzdálené spuštění kódu · zachyceno · Splunk Advisories · SVD-2026-1013: Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026 · Cisco PSIRT · Vulnerabilities in PHP Affecting Cisco Products: October 2026 · Cyber Centre Kanada · AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 · Malwarebytes Labs · PHP2Shell: Why websites are going offline for emergency security updates · Palo Alto PSIRT · CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH) · Securelist (Kaspersky) · Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) · Cisco Talos · Two critical RCEs in PHP core · NÚKIB · Upozornění na "php2shell", dvě kritické zranitelnosti v PHP · NCSC-NL · NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP · CERT.at · Kritische Sicherheitslücken in PHP - Updates verfügbar · Palo Alto Unit 42 · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 · SANS Internet Storm Ctr. · Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) · zachyceno · CISA Advisories · Critical Vulnerabilities in PHP Require Immediate Patching · CERT-SE · Kritiska sårbarheter i PHP · CERT.hr · UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja · SK-CERT (NBÚ SR) · Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a · zachyceno · Fortinet PSIRT · PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619) · Huntress · Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) · zachyceno · Elastic Security · php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619 · zachyceno · Sophos Threat Research · Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Synology warns of C3RB3R ransomware attacks targeting NAS devices

Taiwanese network-attached storage (NAS) appliance maker Synology warned customers to update their devices immediately due to a surge in C3RB3r ransomware attacks. [...]

CVE-2021-22205 * CVE-2021-26084 * CVE-2023-22518 * CVE-2024-10441 * CVE-2024-10445 * CVE-2024-50629 * Synology US

tg: varování tg: zranitelnost tp: malware tp: ransomware

· BleepingComputer · Synology warns of C3RB3R ransomware attacks targeting NAS devices

Risolte vulnerabilità in Synology DiskStation Manager (DSM)

Rilevate diverse vulnerabilità di sicurezza, di cui due con gravità “alta” e due con gravità “critica” in Synology DiskStation Manager (DSM). Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di scrivere/leggere file arbitrari sul filesystem e compromettere la disponibilità dei sistemi interessati.

EPSS 0.01 CVE-2026-13639 CVE-2026-13673 CVE-2026-13684 CVE-2026-6205 Synology IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in Synology DiskStation Manager (DSM)

· zachyceno

SPOJENO PŘES CVE Multiples vulnérabilités dans Synology DSM (21 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Synology DSM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

EPSS 0.01 CVSS 9.8 CVE-2026-13623 CVE-2026-13635 CVE-2026-13639 CVE-2026-13666 CVE-2026-13673 CVE-2026-13683 CVE-2026-13684 CVE-2026-6205 Synology FR FI

tg: zranitelnost tp: DDoS

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans Synology DSM (21 septembre 2026) · zachyceno · NCSC-FI · Synology DSM — Multiple Critical Vulnerabilities

Aggiornamenti di sicurezza per prodotti Synology

Aggiornamenti di sicurezza sanano una vulnerabilità con gravità "critica" presente in Synology Chat Server, componente del prodotto DiskStation Manager (DSM) di Synology. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente autenticato remoto di leggere o scrivere file arbitrari e compromettere la disponibilità del sistema.

EPSS 0.00 CVE-2026-40541 Synology IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Aggiornamenti di sicurezza per prodotti Synology