IncidentsExploitedCVE-2026-109618CVSS 9.25 min read
Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.
IncidentsExploitedCVE-2026-109618CVSS 9.22 min read
Anadolu's October incident timeline reports that researchers at Wiz used Google's Gemini 4 Argon and OpenAI's GPT-5.6 Sol to find the bugs, build working exploits and help validate the fixes.
VulnerabilitiesExploitedCVE-2026-102764CVSS 9.32 min read
Researchers chained an origin-validation gap in the appliance's internal message router to write a PHP file into the public web directory, running code as the site user. CISA added the flaw to its known exploited vulnerabilities catalog.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
A China-linked group chained the PHP flaws with a kernel privilege-escalation bug to get root on PAN-OS devices, while mass scanning against WordPress has yet to produce confirmed compromises.
VulnerabilitiesBrief2 min read
Defiant says threat actors began hitting a race condition in WordPress's update process within hours of the fix, though the exploit window is narrow and no successful compromises are reported.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.21 min read
The agency told federal agencies to patch the kernel privilege escalation bug, which researchers say was used alongside two critical PHP flaws to root servers.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
A missing variable initialization in the Linux kernel could let attackers alter page-cache-backed data, and the NVD entry says it can be chained with two PHP vulnerabilities to implant webshells and run commands as root.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
Honeypots recorded a confirmed remote code execution against an Apache mod_php install running PHP 8.4.26, according to a Perplexity researcher whose findings a second researcher corroborated.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.22 min read
A researcher says attackers ran shell commands on honeypots running PHP 8.4.26, the first reported confirmation of code execution from the PHP2Shell bugs.
VulnerabilitiesExploitedCVE-2026-109618CVSS 9.21 min read
CISA added two critical PHP vulnerabilities tracked as PHP2Shell to its Known Exploited Vulnerabilities Catalog and told federal civilian agencies to patch by Thursday.
IncidentsBrief2 min read
The company says it believes some patient data in Quanum Lab Services Manager was accessed, and that the incident did not involve the recent PHP vulnerabilities.
VulnerabilitiesBrief1 min read
The Internet Storm Center returned to Infocon Green after raising its alert level for a PHP vulnerability, saying patches are out but working exploit code may follow.
