Back
Platform
Php-fpm
Related CVEs
Recent activity
Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 DisclosedOn October 20, 2026, two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed, allowing unauthenticated remote code execution (RCE) on af…Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 Require Immediate ActionOn October 21, 2026, PHP developers released emergency updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to as PHP2Shell. These v…Critical PHP Vulnerabilities PHP2Shell Prompt Urgent Global ResponseOn October 21, 2026, the PHP Foundation disclosed two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on the CVSS scale. These vulnerabilities allow u…PHP2Shell: Critical RCE Vulnerabilities Prompt Emergency PatchesOn October 21, 2026, the PHP security team released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on…ILIAS PHP Object Injection Vulnerability Enables Unauthenticated RCEA critical vulnerability (CVE-2026-80428) in ILIAS allows unauthenticated remote code execution via PHP object injection. Discovered by DigiProSec, the flaw affects ILIAS versions …Critical PHP Vulnerabilities CVE-2026-109618 and CVE-2026-109619 DisclosedOn October 21, 2026, PHP announced a security release addressing two critical vulnerabilities: CVE-2026-109618 and CVE-2026-109619, both with a CVSS score of 9.2. These vulnerabili…RCE Exploit for WordPress via libheif Vulnerability DisclosedA remote code execution (RCE) exploit affecting WordPress installations has been publicly disclosed by Fortbridge. The vulnerability, tracked as GHSA-x8r2-mggj-j6wr, is a heap buff…RCE Vulnerability in PHP Due to Stale Global StateA vulnerability in PHP has been disclosed, allowing for remote code execution (RCE) due to improper handling of global state. This flaw arises when PHP operations access stale memo…