PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described. Security researchers at watchTowr say the two flaws allow remote code execution. Only the four supported PHP branches, 8.2 through 8.5, can receive the... Weiterlesen: PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Em…
Intelligence View
⚡ tsecurity.de Intelligence
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert
PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
19 sources
Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
18 more sources
CCyber Security News2 hours agoCritical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List VVulDB Updates5 hours agoCVE-2025-68319 | Linux Kernel up to 6.17.7 netconsole update_userdata state issue (Nessus ID 298897 / WID-SEC-2025-2868) VVulDB Updates5 hours agoCVE-2025-68230 | Linux Kernel up to 6.12.59/6.17.9 amdgpu gfx_v9_4_3_switch_compute_partition memory corruption (Nessus ID 302766 / WID-SEC-2025-2868) VVulDB Updates5 hours agoCVE-2025-68251 | Linux Kernel up to 6.17.5 z_erofs_load_lcluster_from_disk infinite loop (EUVD-2025-203645 / Nessus ID 298897) VVulDB Updates5 hours agoCVE-2025-68209 | Linux Kernel up to 6.17.8 mlx5_add_cq_to_tasklet initialization (Nessus ID 296481 / WID-SEC-2025-2868) VVulDB Updates5 hours agoCVE-2025-68236 | Linux Kernel up to 6.17.9 scsi Power_Condition initialization (Nessus ID 302766 / WID-SEC-2025-2868)
+12
18 sources
CVE-2026-79848 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 code injection
17 more sources
VVulDB Updates4 hours agoCVE-2026-79853 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 code injection VVulDB Updates4 hours agoCVE-2026-79869 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 code injection VVulDB Updates4 hours agoCVE-2026-79852 | HPE AOS-8/AOS-10 up to 10.8.1.1 code injection VVulDB Updates4 hours agoCVE-2026-79857 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 code injection VVulDB Updates4 hours agoCVE-2026-79862 | HPE AOS-8/AOS-10 up to 10.8.1.1 code injection VVulDB Updates4 hours agoCVE-2026-79871 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 code injection
+11
15 sources
CVE-2026-79858 | HPE AOS-8 privilege escalation
14 more sources
VVulDB Updates4 hours agoCVE-2026-79956 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 privilege escalation VVulDB Updates4 hours agoCVE-2026-79874 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 Local Privilege Escalation VVulDB Updates4 hours agoCVE-2026-95709 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 privilege escalation VVulDB Updates4 hours agoCVE-2026-79882 | HPE AOS-10 up to 10.4.1.13/10.7.2.6/10.8.1.1 Local Privilege Escalation VVulDB Updates5 hours agoCVE-2026-95721 | HPE Unknown product up to 8.10.0.23/8.13.3.0 Local Privilege Escalation (EUVD-2026-108415) VVulDB Updates5 hours agoCVE-2026-95717 | HPE Unknown product up to 10.8.1.1 privilege escalation (EUVD-2026-108411)
+8
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4286188/vulnerabilities-cve/php2shell-two-unpatched-critical-php-rce-flaws-cvss-92-trigger-emergency-security-alert/