NewsCheck Point Research
26th October – Threat Intelligence Report
Linked advisories
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- CVE-2026-109618PHP Group PHP — PHP Memory Corruption Vulnerability
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CVE-2026-109618Red Hat Security Advisory: php:7.4 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.3 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php8.4 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php7
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php74
- CVE-2026-109618Security update for php8
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566512
- CVE-2026-109618Debian LTS php8.2: security update
- CVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CVE-2026-109618UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP
- CVE-2026-109618Critical vulnerabilities in PHP
- CVE-2026-109618Critical security issue affecting PHP
- CVE-2026-109618PHP Multiple Vulnerabilities
- CVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CVE-2026-109618Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.
- CVE-2026-109618Siemens ProductCERT Advisory SSA-166980
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566435
- CVE-2026-109619PHP Group PHP — PHP Stale Internal Request-State Vulnerability
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-110264GitLab: Ganzzahlüberlauf
- CVE-2026-110264GitLab: Ganzzahlüberlauf
- CVE-2026-110264Security Advisory 2026-019 — Critical Vulnerability in GitLab Community and Enterprise Editions
- CVE-2026-110264GitLab: Mehrere Schwachstellen
- CVE-2026-110264Ruby 4.0.9, 3.4.12 and 3.3.13 fix Regexp compiler memory bugs behind GitLab's CVSS 10 RCEs
- CVE-2026-110264GitLab CVSS 10 unauthenticated RCE via regex compiler (CVE-2026-110264)
- CVE-2026-110264GitLab Multiple Vulnerabilities
- CVE-2026-110264Integer Overflow or Wraparound in GitLab
- CVE-2026-110264Critical Vulnerability in GitLab
- CVE-2026-110264Integer Overflow or Wraparound in GitLab
- CVE-2026-110264Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- CVE-2026-110264Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- CVE-2026-110264Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- CVE-2026-114625Arista Networks VeloCloud Orchestrator: SQL-Injection
- CVE-2026-114625Arista VeloCloud Orchestrator: Schwachstelle ermöglicht SQL-Injection und potenziell Privilegieneskalation
- CVE-2026-114625Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator SQL Injection Vulnerability
- CVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CVE-2026-115560PHP: Schwachstelle ermöglicht Codeausführung
- CVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
Affected vendors and products
More on October
Other advisories
- Not ratedosv:CLEANSTART-2026-HO16280HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023
- Not ratedosv:CLEANSTART-2025-OK79065Change #4777 (introduced in October 2017) introduced an unforeseen issue in releases which were issued after that date, affecting which clients are permitted to make recursive queries to a BIND nam...
- Not ratedosv:CLEANSTART-2026-QS58056HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023
- MediumCVE-2026-94290Rancher and Fleet October 2026 security release: any Rancher user could become cluster-admin on the management cluster (CVE-2026-94290)
- HighCVE-2026-76490Cisco Expressway Series Security Hardening Release: October 2026
- CriticalCVE-2026-76475Cisco Unified Communications Products Security Hardening Release: October 2026
- HighCVE-2026-20291Multiple Cisco Products Snort 3 Security Hardening Release: October 2026
- CriticalCVE-2026-106071Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
Other news entries
- European supermarkets that failed to act after French freezer attack are now feeling the heatNewsCSO Online
- Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal AccessNewsThe Hacker News
- Cybersecurity M&A Roundup: 37 Deals Announced in October 2026NewsSecurityWeek
- DarkBlinders Compromises Israeli Target and Iraqi Kurdish Government Cloud EnvironmentNewsThe Hacker News
- Microsoft fixes Smart App Control broken by October Windows updateNewsBleepingComputer
- Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)NewsRapid7
- Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated ScriptsNewsThe Hacker News
- Ivanti patches two more Connect Secure zero-days chained in attacksNewsBleepingComputer
Source: https://research.checkpoint.com/2026/26th-october-threat-intelligence-report/
ID