VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva

SPOJENO PŘES CVE KEV ✓ (3 z 3) EPSS 1.00 (nejvyšší)

PHP2Shell and Node2Shell: Find, Fix, and Verify Across Your Web Apps and APIs 

Key Takeaways Neither flaw is in your application code. Every app and API on a vulnerable runtime inherits the risk. PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node2Shell (CVE-2026-111497) is fixed in Node.js 22.23.4, 24.22.1, and 26.12.1. Both are on the CISA KEV list. PHP2Shell was added October 26. Node2Shell followed on October 27. Qualys TotalAppSec tests the application and the APIs with four non-intrusive QIDs for detection of…

Číst originál na Qualys →

2 zprávy z 1 zdroje · první CZ · EN/orig

PHP Node.js US

tg: zneužíváno tg: rozbor tg: propagace

CVE v události 3

CVEhodnoceníKEVEPSS
CVE-2026-109618 9.2 4.0 · php KEV ✓ 1.00
CVE-2026-109619 9.2 4.0 · php KEV ✓ 1.00
CVE-2026-111497 9.2 4.0 · Google KEV ✓ 0.83

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 2

  1. · Qualys US nadpis události

    PHP2Shell and Node2Shell: Find, Fix, and Verify Across Your Web Apps and APIs 

    Key Takeaways Neither flaw is in your application code. Every app and API on a vulnerable runtime inherits the risk. PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node2Shell (CVE-2026-111497) is fixed in Node.js 22.23.4, 24.22.1, and 26.12.1. Both are on the CISA KEV list. PHP2Shell was added October 26. Node2Shell followed on October 27. Qualys TotalAppSec tests the application and the APIs with four non-intrusive QIDs for detection of…

  2. · Qualys US

    PHP2Shell and Node2Shell: Find, Fix, and Verify Across Your Web Apps and APIs 

    Key Takeaways Neither flaw is in your application code. Every app and API on a vulnerable runtime inherits the risk. PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node2Shell (CVE-2026-111497) is fixed in Node.js 22.23.4, 24.22.1, and 26.12.1. Both are on the CISA KEV list. PHP2Shell was added October 26. Node2Shell followed on October 27. Qualys TotalAppSec tests the application and the APIs with four non-intrusive QIDs for detection of…