Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the internet. The flaws discovered in the PHP scripting language could allow attackers to perform unauthenticated remote code execution (RCE). On Wednesday morning, the PHP Foundation released... Weiterlesen: Two critical PHP flaws put the web on alert as emergency patches arrive
Intelligence View
⚡ tsecurity.de Intelligence
Two critical PHP flaws put the web on alert as emergency patches arrive
Organizations are scrambling to protect themselves following the disclosure of two critical vulnerabilities in commonly used code that powers much of the…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
33 Quellen
CVE-2026-90164 | Linux Kernel up to 7.2.5 ksmbd ksmbd_server_init allocation of resources (WID-SEC-2026-3444)
32 weitere Quellen
Ttsecurity.devor 18 Min.CVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference (WID-SEC-2026-3444) Ttsecurity.devor 18 Min.CVE-2026-90165 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_stop_durable_scavenger null pointer dereference (WID-SEC-2026-3444) Ttsecurity.devor 18 Min.CVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444) Ttsecurity.devor 18 Min.CVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444) Ttsecurity.devor 18 Min.CVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444) Ttsecurity.devor 18 Min.CVE-2026-90170 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ipc_validate_msg out-of-bounds (WID-SEC-2026-3444)
+26
6 Quellen
CVE-2026-97839 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100440)
5 weitere Quellen
Ttsecurity.devor 18 Min.CVE-2026-97838 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100439) Ttsecurity.devor 18 Min.CVE-2026-97837 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100438) Ttsecurity.devor 18 Min.CVE-2026-97836 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100437) Ttsecurity.devor 18 Min.CVE-2026-97835 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100436) Ttsecurity.devor 18 Min.CVE-2026-97834 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100435)
5 Quellen
CVE-2025-64213 | StylemixThemes MasterStudy LMS Pro Plugin up to 4.7.16 on WordPress insertion of sensitive information into sent data
4 weitere Quellen
Ttsecurity.devor 18 Min.CVE-2025-60182 | Schiocco Support Board Plugin up to 3.8.7 on WordPress cross site scripting Ttsecurity.devor 18 Min.CVE-2025-64193 | 8theme XStore Plugin up to 9.6.1 on WordPress php file inclusion Ttsecurity.devor 18 Min.CVE-2025-64376 | CridioStudio ListingPro Plugin up to 2.9.10 on WordPress cross site scripting Ttsecurity.devor 18 Min.CVE-2025-64189 | 8theme XStore Core Plugin up to 5.6 on WordPress cross site scripting
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4288491/sicherheitsluecken-cve/two-critical-php-flaws-put-the-web-on-alert-as-emergency-patches-arrive/