KEV ✓ (3 z 5) · ransomware EPSS 1.00 (nejvyšší)
php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities
Two critical PHP remote code execution vulnerabilities will be patched in an emergency release on October 21. Fixes are only expected for supported PHP 8.x branches. Key takeaways CVE-2026-109618 and CVE-2026-109619 are critical vulnerabilities in PHP, both rated CVSSv4.0 9.2 by the PHP security team. Public reporting describes both as remote code execution vulnerabilities. watchTowr says it believes it has reproduced CVE-2026-109618, and Cloudflare CTO Dane Knecht says the company is seeing…
PHP US
CVE v události 5
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2012-1823 | 9.8 3.1 · CISA-ADP | KEV ✓ | 1.00 |
| CVE-2019-11043 | 8.7 3.1 · php | KEV ✓ | 1.00 |
| CVE-2024-4577 | 9.8 3.1 · php | KEV ✓ | 1.00 |
| CVE-2026-109618 | – | – | – |
| CVE-2026-109619 | – | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.