Sicherheitslücken (CVE)

Sicherheitslücken (CVE) Cyber Security News

Node.js Patches High-Severity RCE and TLS Certificate Bypass Vulnerabilities

The Node.js Project released security updates on October 21, 2026, addressing ten vulnerabilities across its 26.x, 24.x, and 22.x release lines.

Sicherheitslücken (CVE) Cyber Security News 3 sources

Critical GitLab RCE Flaw Lets Attackers Execute Code Without Authentication

GitLab has released emergency security updates addressing a critical remote code execution vulnerability that could allow unauthenticated attackers…

Sicherheitslücken (CVE) GBHackers Security 9 sources

PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution

PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on…

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed 2 sources

[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI… 2 sources

GitLab schließt kritische Regex-Lücke (CVSS 10.0) für Self-Managed RCE

LONDON (IT BOLTWISE) – GitLab hat am 21. Oktober eine kritische Schwachstelle behoben, die in Self-Managed-Installationen eine Remote-Code-Ausführung…

Sicherheitslücken (CVE) VulDB Updates

CVE-2026-68116 | Linux Kernel up to 7.2-rc4 vxlan vxlan_mdb_remote_srcs_add allocation of resources (WID-SEC-2026-2730)

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as critical.

Sicherheitslücken (CVE) Securelist

Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)

UPD 22.10.2026: added a description of how the Kaspersky Managed Detection and Response service detects the described malicious activity.

Sicherheitslücken (CVE) The Hacker News 2 sources

PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge

PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web…

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

PHP2Shell: Was wirklich gegen die PHP-RCE-Lücken vor dem Fix hilft

LONDON (IT BOLTWISE) – Vor dem PHP-Fix gegen die „PHP2Shell“-Sicherheitslücken reicht eine einzelne Konfigurationsänderung nicht aus, sagt eine…

Sicherheitslücken (CVE) DEV Community

No prompt injection required: Langchain-Chatchat's /tools/call is a remote shell

No prompt injection required: Langchain-Chatchat's /tools/call is a remote shell A vector breakdown of CVE-2026-75128 / GHSA-5rx2-xp53-9x5r…

Sicherheitslücken (CVE) The Hacker News

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not…

Sicherheitslücken (CVE) Cyber Security News

Critical Fortinet FortiSIEM RCE Vulnerability Gets Public Exploit Code

A newly released public proof-of-concept exploit code for CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability that enables unauthenticated…

Sicherheitslücken (CVE) Patchstack Blog

Major security alert: PHP vulnerable to critical RCE, attacks ongoing

Attacks are already under way: Patchstack has received reports of active exploitation from multiple hosting partners.

Sicherheitslücken (CVE) Vulnerability definition fe…

Unauthenticated Arbitrary File Upload in ELEX HelpDesk IMAP Attachment Handling

The ELEX HelpDesk & Customer Ticketing System (WSDesk) plugin saves attachments from emails fetched over IMAP into the public uploads directory under…

Sicherheitslücken (CVE) Vulnerability definition fe…

Unauthenticated SQL Injection in Essential Addons for Elementor Load More

The unauthenticated Load More and pagination AJAX handlers in Essential Addons for Elementor pass client-supplied query arguments to WP_Query without…

Sicherheitslücken (CVE) «Hacker News» 🗞️🦾 IT BOLTWI…

PHP2Shell: Notfall-Patch für zwei kritische PHP-RCE-Lücken ab 14:00 UTC

LONDON (IT BOLTWISE) – PHP schiebt heute einen außerplanmäßigen Security-Release nach, um zwei kritisch bewertete PHP-RCE-Lücken zu schließen.

Sicherheitslücken (CVE) GBHackers Security

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0.

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[remote] ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

Proof of Concept (PoC) Exploit-DB.com RSS Feed 2 sources

[remote] Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

Proof of Concept (PoC) Exploit-DB.com RSS Feed

[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover

Keycloak 26.7.2 - Unauthenticated Account Takeover

Sicherheitslücken (CVE) Exploit-DB.com RSS Feed

[webapps] Open eClass 3.15 - RCE