NewsGreyNoise
Global Event: PHP2SHELL Live Activity Report
Teaser aus der Quelle
GreyNoise beobachtet Ausnutzungsversuche gegen PHP-Schwachstellen CVE-2026-109618 und CVE-2026-109619, bekannt als 'php2shell'. Die Schwachstellen ermöglichen potenziell die Ausführung von Schadcode auf betroffenen Systemen. Es wird empfohlen, die betroffenen Systeme zu patchen, um die Sicherheitslücken zu schließen.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei GreyNoise lesenVerknüpfte Advisories
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CVE-2026-109618Red Hat Security Advisory: php:7.4 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.3 security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php8.4 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php7
- CVE-2026-109618Security update for php8
- CVE-2026-109618Security update for php74
- CVE-2026-109618Security update for php8
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566512
- CVE-2026-109618Debian LTS php8.2: security update
- CVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CVE-2026-109618UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP
- CVE-2026-109618Critical vulnerabilities in PHP
- CVE-2026-109618Critical security issue affecting PHP
- CVE-2026-109618PHP Multiple Vulnerabilities
- CVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CVE-2026-109618Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.
- CVE-2026-109618Siemens ProductCERT Advisory SSA-166980
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566435
- CVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CVE-2026-109618Vulnerabilities in PHP Affecting Cisco Products: October 2026
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for t…
- CVE-2026-109619PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated a…
- CVE-2026-109618Alert Regarding Multiple Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
Betroffene Hersteller und Produkte
Mehr zu Global
Weitere Advisories
- Ohne BewertungCVE-2026-118181The Duplicate Post WordPress plugin before 1.5.8 does not perform a capability check when saving its global settings, relying only on its own role-access lis…
- Hochosv:MAL-2026-19256Malicious code in node-global-key-listener-v9 (npm)
- Ohne Bewertungosv:CVE-2026-62973BACnet Stack: Remote Global-Buffer-Overflow Read in readpropm via Malformed ReadPropertyMultiple-ACK
- Ohne Bewertungosv:CVE-2026-58498BACnet Stack: Remote global-buffer-overflow in apps/router-ipv6/main.c routed APDU forwarding path
- HochCVE-2026-58498BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.5, 1.5.1, and 1.6.0, there is a remote global-buffe…
- Ohne Bewertungosv:CVE-2026-52787BACnet Stack: Global APDU transmit buffer out-of-bounds write in device.address-binding response encoding via address_list_encode()
- Ohne Bewertungosv:CVE-2026-128037gittuf: Policy rules bypassed in the presence of global rules
- MittelCVE-2026-128037In gittuf 0.10.0 through 0.15.0, when a minimum threshold global rule and a policy rule protect the same namespace, verification gives the global rule's chec…
Weitere News-Einträge
- Microsoft Struggles to Restore Email and Other Services in a Global OutageNewsSecurityWeek
- Palo Alto Networks GlobalProtect: Schwachstelle ermöglicht PrivilegieneskalationSchwachstelleBSI CERT-Bund
- The global socket: how threat actors are weaponizing GSocket for stealthy C2NewsMicrosoft Threat Intelligence
- New malware doesn’t call home, it turns your Exchange server into its homeNewsCSO Online
- Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product SecurityNewsCSO Online
- Black Hat India 2026 Makes a Landmark Debut in Bengaluru, Bringing the Global Cybersecurity Community to IndiaNewsDark Reading
- US bans MEXC crypto exchange over sanctions evasion, cybercrime linksNewsBleepingComputer
- U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory LossesNewsThe Hacker News
Quelle: https://www.greynoise.io/blog/global-event-php2shell-live-activity-report
ID