NewsBleepingComputer
PHP ships emergency patches for critical PHP2Shell flaws
Teaser from the source
The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP vulnerabilities
More on emergency
Other advisories
- Not ratedosv:CVE-2026-104875Ente: Accepted emergency contact can bypass the recovery notice period
- CriticalCVE-2026-68132super: fix emergency thaw deadlock on frozen block devices
- Not ratedosv:CVE-2026-68150fs/super: fix emergency thaw double-unlock of s_umount
- Not ratedosv:CVE-2026-68132super: fix emergency thaw deadlock on frozen block devices
- MediumCVE-2024-35648Andy Moyle Emergency Password Reset: Cross-Site-Request-Forgery (CSRF)
- MediumCVE-2024-35648Cross-Site-Request-Forgery (CSRF)-Schwachstelle in Andy Moyle Emergency Password Reset ermöglicht Cross-Site-Request-Forgery.
- MediumCVE-2026-9732Das Plugin EmergencyWP – Dead Man's Switch & Legacy Deliverance für WordPress ist in allen Versionen bis einschließlich 1.
- MediumCVE-2026-9732Das EmergencyWP – Dead Man's switch & legacy deliverance Plugin für WordPress ist in allen Versionen bis einschließlich 1.
Other news entries
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
- PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts EmergeNewsThe Hacker News
- PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security AlertNewsThe Hacker News
- PHP warns it plans to release 2 emergency patches imminentlyNewsArs Technica — Security
- PHP warns admins of two critical flaws, emergency patches coming tomorrowNewsBleepingComputer
- Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and SoftwareNewsThe Hacker News
- Go Issues Emergency Update Blocking Eight CA Keys Over Undisclosed Security ConcernsNewsThe Hacker News
- F5 rushes out emergency NGINX patches for three critical flawsNewsCSO Online
ID