VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: PHP× typ: rozbor× v celém archivu zrušit filtry

4 karet z 8 položek CZ · EN/orig

· zachyceno

SPOJENO PŘES CVE Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-109618, CVE-2026-109619, Summary: This Security Alert addresses CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as PHP2Shell, allow for unauthenticated remote code execution in PHP. Oracle strongly recommends that customers apply the available security patches without delay. The Security Alert advisory will continue to be updated as additional product patches become…

KEV ✓ EPSS 1.00 CVSS 9.8 CVE-2026-109618 CVE-2026-109619 Oracle Festo Apache PHP WAGO Belden QNAP Synology ESET Welotec Juniper Networks HPE METTLER TOLEDO Citrix Cloud Software Group Palo Alto Networks Tenable Splunk Cisco WordPress Drupal Joomla výroba a průmysl školství FI DE FR IT BE US SK CZ CA RU NL AT SE HR GB

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tg: návod tg: propagace tp: malware tp: phishing tp: dodavatelský řetězec tp: AI tp: průmyslové systémy

· zachyceno · NCSC-FI · Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619 · CERT@VDE · Two critical PHP vulnerabilities in several Festo Didactic products · zachyceno · CERT-FR – avis · Multiples vulnérabilités dans macmon et NRSW (02 novembre 2026) · CSIRT Itálie (ACN) · ESET: aggiornamenti e mitigazioni per le vulnerabilità "PHP2Shell" · Aikido Security · How to patch PHP2Shell with free Aikido Images · Tenable Research · Discover and remediate PHP2Shell exposure with Tenable · ESET WeLiveSecurity · PHP2Shell: What to know about two critical PHP flaws · BleepingComputer · PHP2Shell security flaws now sucessfully exploited in the wild · Qualys · Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own · CSIRT.CZ – novinky · Kritické zranitelnosti PHP umožňují vzdálené spuštění kódu · zachyceno · Splunk Advisories · SVD-2026-1013: Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026 · Cisco PSIRT · Vulnerabilities in PHP Affecting Cisco Products: October 2026 · Cyber Centre Kanada · AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 · Malwarebytes Labs · PHP2Shell: Why websites are going offline for emergency security updates · Palo Alto PSIRT · CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH) · Securelist (Kaspersky) · Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) · Cisco Talos · Two critical RCEs in PHP core · NÚKIB · Upozornění na "php2shell", dvě kritické zranitelnosti v PHP · NCSC-NL · NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP · CERT.at · Kritische Sicherheitslücken in PHP - Updates verfügbar · Palo Alto Unit 42 · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 · SANS Internet Storm Ctr. · Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) · zachyceno · CISA Advisories · Critical Vulnerabilities in PHP Require Immediate Patching · CERT-SE · Kritiska sårbarheter i PHP · CERT.hr · UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja · SK-CERT (NBÚ SR) · Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a · zachyceno · Fortinet PSIRT · PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619) · Huntress · Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) · zachyceno · Elastic Security · php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619 · zachyceno · Sophos Threat Research · Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

php2shell one week later: Why one exploit doesn’t work everywhere

php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: one tuned exploit can reach every device that runs it. Key takeaways The five vulnerable PHP sites we exposed to the internet were not compromised, and public proofs-of-concept (PoCs) that go beyond version checks do not reliably confirm whether a host is…

KEV ✓ · ransomware EPSS 1.00 CVSS 9.2 CVE-2021-44228 CVE-2026-109618 CVE-2026-109619 CVE-2026-46300 PHP Palo Alto Networks US

tg: zneužíváno tg: rozbor

· Tenable Research · php2shell one week later: Why one exploit doesn’t work everywhere

(Reliable)? php2shell exploitability, (Fri, Oct 23rd)

Yesterday everyone was running around like crazy (me included :) because of the php2shell vulnerability. However, after looking closely at some published PoC's - and there is an unbelievable amount of AI generated - erm, slop - it looks like building a universal, reliable, one click exploit is quite difficult (unless I'm missing something, so please do let me know). The PoC's that have been released so far have several pre-requirements and are almost cheating. First, in order to have a clean…

PHP Apache US

tg: rozbor tg: návod

· SANS Internet Storm Ctr. · (Reliable)? php2shell exploitability, (Fri, Oct 23rd)

· zachyceno