NewsPalo Alto Networks Unit 42
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
Teaser from the source
CVE-2026-109618 and CVE-2026-109619 are Critical vulnerabilities in PHP, a scripting language used globally for web servers and CMS systems. The post Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29) appeared first on Unit 42 .
This is the RSS-feed teaser. Read the full article at the original source.
Read at Palo Alto Networks Unit 42Linked advisories
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- CVE-2026-109618PHP Group PHP — PHP Memory Corruption Vulnerability
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CVE-2026-109618Red Hat Security Advisory: php:7.4 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.3 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php8.4 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php7
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php74
- CVE-2026-109618Security update for php8
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566512
- CVE-2026-109618Debian LTS php8.2: security update
- CVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CVE-2026-109618UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP
- CVE-2026-109618Critical vulnerabilities in PHP
- CVE-2026-109618Critical security issue affecting PHP
- CVE-2026-109618PHP Multiple Vulnerabilities
- CVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CVE-2026-109618Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.
- CVE-2026-109618Siemens ProductCERT Advisory SSA-166980
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566435
- CVE-2026-109619PHP Group PHP — PHP Stale Internal Request-State Vulnerability
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CVE-2026-109618Vulnerabilities in PHP Affecting Cisco Products: October 2026
Affected vendors and products
More on Brief
Other advisories
- Not ratedosv:CVE-2026-93633Zimbra Collaboration Suite Briefcase CSS Sanitization Bypass via Non-ASCII Stylesheet Characters
- CriticalCVE-2026-78372RansomLook erzwingt nicht konsistent Autorisierungsprüfungen beim Zugriff auf Gruppen, Märkte und Erpresserbriefe, die als privat markiert sind.
- CriticalCVE-2026-33634Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy
- Not ratedosv:CVE-2026-33430Briefcase: Windows MSI Installer Privilege Escalation via Insecure Directory Permissions
- HighCVE-2026-33430Beeware Briefcase: fehlerhafte Berechtigungen für kritische Ressource
- HighCVE-2026-33430Beeware Briefcase: fehlerhafte Berechtigungen für kritische Ressource
- CriticalCVE-2026-33634Trivy ecosystem supply chain was briefly compromised
- Not ratedosv:CVE-2026-33634Trivy ecosystem supply chain briefly compromised
Other news entries
- Hackers hijack AOMEI update servers to secretly spread malwareNewsBleepingComputer
- Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)NewsPalo Alto Networks Unit 42
- OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle emailNewsBleepingComputer
- The executive profile your security team isn’t defendingNewsCSO Online
- Now Available: The Threat Brief Library in the GreyNoise PlatformNewsGreyNoise
- Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw FlawsNewsThe Hacker News
- The ‘Miasma’ worm source code briefly leaked on GitHubNewsBleepingComputer
- Hackers Used Meta’s AI Support Bot to Seize Instagram AccountsNewsKrebs on Security
Source: https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/
ID