NewsVMware Security Advisories
Neutralizing PHP2Shell: Stopping Critical PHP RCEs with VMware vDefend and Avi WAF
Linked advisories
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- CVE-2026-109618PHP Group PHP — PHP Memory Corruption Vulnerability
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CVE-2026-109618Red Hat Security Advisory: php:7.4 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.3 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php8.4 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php8
- CVE-2026-109619PHP Group PHP — PHP Stale Internal Request-State Vulnerability
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618Security update for php7
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php74
- CVE-2026-109618Security update for php8
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566512
- CVE-2026-109618Debian LTS php8.2: security update
- CVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CVE-2026-109618UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP
- CVE-2026-109618Critical vulnerabilities in PHP
- CVE-2026-109618Critical security issue affecting PHP
- CVE-2026-109618PHP Multiple Vulnerabilities
- CVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CVE-2026-109618Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.
- CVE-2026-109618Siemens ProductCERT Advisory SSA-166980
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566435
Affected vendors and products
More on vDefend
Other news entries
- Know Your Lateral Security Risk in an Afternoon: Getting Started with the vDefend Security AssessmentNewsVMware Security Advisories
- Protecting the vSphere Kubernetes Control Plane: Architecting Zero Trust for Supervisor and VKS with vDefendNewsVMware Security Advisories
- Leveraging GenAI for Simplifying Zero Trust and Accelerating Threat Defense in VMware vDefendNewsVMware Security Advisories
- Mastering Cybersecurity with VMware vDefend and Avi via Hands-on LabsNewsVMware Security Advisories
- VMware vDefend IDPS: Securing Private Cloud Workloads in the Age of Frontier AINewsVMware Security Advisories
- VMware vDefend Advances Multi-Layer Lateral Security, Deployment Automation and Performance for the Frontier AI EraNewsVMware Security Advisories
- VMware vDefend Sessions at VMware Explore 2026NewsVMware Security Advisories
- Validated Compliance: VMware vDefend Conforms with NIST CSF, HIPAA and PCI DSSNewsVMware Security Advisories
Source: https://blogs.vmware.com/security/2026/10/stopping-php-rces-vdefend-avi-waf.html
ID