poslední zpráva
SPOJENO AI
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]
PHP HR SK US BE EU
CVE v události 2
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-109618 | – | – | – |
| CVE-2026-109619 | – | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.2.
Jak se o tom psalo 7
-
· CERT.hr HR
UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja
PHP Security Team najavio je izvanrednu sigurnosnu zakrpu zakazanu za 21. listopad 2026. u 16:00 sati (14:00 UTC). Pozivaju sve PHP korisnike na hitnu primjenu zakrpi. Prije službene objave procurile su informacije o dvjema kritičnim ranjivostima u jezgri PHP-a koje napadaču putem web zahtjeva omogućuju preuzimanje poslužitelja. Uspješno iskorištavanje ranjivosti napadaču omogućava izvršavanje proizvoljnog programskog koda (engl. remote code execution – RCE) bez autentifikacije. Radi se o…
-
· SK-CERT (NBÚ SR) SK
Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a
Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými ako CVE-2026-109618 a CVE-2026-109619. Podľa aktuálne dostupných informácií môže úspešné zneužitie umožniť vzdialenému neautentifikovanému útočníkovi vykonať ľubovoľný kód na zasiahnutom systéme. Obe zraniteľnosti majú pridelené skóre CVSS v4.0 vo výške 9,2. Zraniteľnosti sú zneužiteľné vo všetkých verziách od PHP 5.0 až po... The post appeared first on SK-CERT.
-
· Huntress US
Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
Two critical PHP RCEs, CVE-2026-109618 and CVE-2026-109619, leaked before the patch. Learn what's known, who's exposed, and how to prepare now.
-
· Qualys US
PHP Announces Critical Security Release for Two Vulnerabilities
On October 20, 2026, the PHP security team announced an upcoming security release addressing two critical vulnerabilities, each rated CVSS v4.0 9.2. The release is scheduled for October 21, 2026, at 14:00 UTC. PHP has indicated that the updates may be released earlier if vulnerability details become public or evidence of active exploitation emerges. Public reports have linked CVE-2026-109618 and CVE-2026-109619 to the upcoming PHP security release. However, PHP has not yet confirmed these…
-
· Aikido Security BE
What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
Two critical PHP RCE flaws (CVE-2026-109618, CVE-2026-109619) are being patched. Every PHP version is affected. How to patch, a temporary mitigation, and how to check your hosts. Category: Vulnerabilities & Threats
-
· BleepingComputer US nadpis události
PHP warns admins of two critical flaws, emergency patches coming tomorrow
The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical vulnerabilities, as information about the flaws has reportedly leaked ahead of their scheduled disclosure. [...]
-
· CERT-EU EU
2026-018: Critical Vulnerabilities in PHP
On 20 October 2026, the PHP foundation announced an upcoming security release addressing two critical vulnerabilities in PHP that could lead to remote code execution, according to other leaks. At this time, no technical details have been made public. CERT-EU advises organisations to prepare for immediate patching of affected assets. Where immediate patching is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix is available. The…