Intelligence View

⚡ tsecurity.de Intelligence

PHP2Shell Vulnerability: Percona Security Update

About PHP Remote Code Execution Vulnerability (PHP2Shell CVE-2026-109618 & CVE-2026-109619)Percona Security has been actively monitoring and responding to the…

Sicherheitslücken (CVE) Blog - Percona 23.10.2026, 15:38 Uhr 1 Min. Lesezeit 0-CLICK

BeitragSeite↗ Quelle (Blog - Percona)

About PHP Remote Code Execution Vulnerability (PHP2Shell CVE-2026-109618 & CVE-2026-109619)Percona Security has been actively monitoring and responding to the recently disclosed PHP2Shell vulnerability, assessing its potential impact on our infrastructure and services.Protecting our customers and their data remains our highest priority.... Weiterlesen: PHP2Shell Vulnerability: Percona Security Update

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

IoC Intelligence

2 Indikatoren · Defanged · STIX 2.1

CVE-2026-109618CVE-2026-109619

CTI Threat Relationship Graph

Akteure · Techniken · Beziehungen

3 Knoten · 2 Relationen

CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC

Exploit & Remediation Lifecycle

PoC · Ausnutzung · Patch-Stufen

CVE-2026-109619

Entdeckung & Meldung

Schwachstelle identifiziert & registriert

Sicherheits-Advisory

Offizielle Warnung & CVE-Zuweisung

Exploit / PoC

Öffentlicher Nachweis/Code verfügbar (Exploit-DB/EUVD)

In-the-Wild Ausnutzung

Keine Massenausnutzung gemeldet

Patch & Schutzmaßnahmen

Upstream-Patch-Referenz vorhanden (Commit-/Advisory-Link)

Exploit Weaponization & PoC Radar

Nur belegte Faktoren · kein Score-Theater

CRITICAL WEAPONIZED · Index 75/100

Exploit-DB

Kein EDB-Eintrag

Interaktion

0-Click

Authentifizierung

Nicht erforderlich

Öffentliche PoC-Quellen:GitHub PoC: santihabib/CVE-2026-109619 GitHub PoC: fmdiscioglu/php-cve-2026-109619-checker GitHub PoC: unlimit0118/CVE-2026-109619-php2shell-poc GitHub PoC: LordX404/php2shell-exploit GitHub PoC: cozybear-dev/cve-2026-109619

Compliance, SLA & Vendor Adherence

Advisory-Prüfung · Score-Einordnung · Fristen

CISA-SSVC-Triage (vulnrichment)CVE-2026-109618

Exploitation: none (Keine bekannte Ausnutzung)Automatable: no (Nicht automatisierbar)Technical Impact: total (Vollständig)

Quelle: CISA-ADP vulnrichment · Stand 2026-10-21T00:00:00+00:00 · CISA Coordinator

Advisory Radar

Hersteller-Sicherheitsmeldungen & Patch-Status

In herstellerseitiger Prüfung

Handlungsempfehlung für Administratoren

Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.

Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):

Upstream-Referenz (Code-Hosting, kein Advisory)
github.com

🚀 Auf tsecurity.de entdecken

Intelligence Digest — free The top security news daily · unsubscribe anytime

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

No reader ratings yet

Was this page helpful?

🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

22 sources

ZDI-CAN-33367: Linux Kernel Local Root Zero-Day, Mitigation for CloudLinux

21 more sources

VulDB Updates2 hours agoCVE-2026-63843 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm amdgpu jpeg unusual condition VulDB Updates2 hours agoCVE-2026-63842 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm amdgpu jpeg unusual condition VulDB Updates2 hours agoCVE-2026-63841 | Linux Kernel up to 6.18.32/7.0.9 Amdgpu Jpeg drm/amdgpu/jpeg user_fence unusual condition VulDB Updates2 hours agoCVE-2026-63840 | Linux Kernel up to 7.0.9 Drm Amdgpu Jpeg /amdgpu/jpeg input validation it-daily.net2 hours agoLinux: Zwei kritische Lücken ohne Kernel-Patch CloudLinux3 hours agoDirty Frag v2.0 (ZDI-CAN-33367): Linux Kernel Local Root Zero-Day, Mitigation for CloudLinux

+15

↗ Open analysis

10 sources

CVE-2022-47653 | GPAC 2.1-DEV-rev593-g007bf61a0 MP4box media_tools/av_parsers.c eac3_update_channels buffer overflow (Issue 2349 / EUVD-2022-50412)

9 more sources

VulDB Updates44 min. agoCVE-2022-47654 | GPAC 2.1-DEV-rev593-g007bf61a0 MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal buffer overflow (Issue 2350 / EUVD-2022-50413) VulDB Updates44 min. agoCVE-2022-47656 | GPAC 2.1-DEV-rev617-g85ce76efd MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal buffer overflow (Issue 2353 / EUVD-2022-50415) VulDB Updates35 min. agoCVE-2022-47659 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4box gf_bs_read_data buffer overflow (Issue 2354 / EUVD-2022-50418) VulDB Updates35 min. agoCVE-2022-47658 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4Box media_tools/av_parsers.c gf_hevc_read_vps_bs_internal buffer overflow (Issue 2356 / EUVD-2022-50417) VulDB Updates35 min. agoCVE-2022-47657 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4Box media_tools/av_parsers.c hevc_parse_vps_extension buffer overflow (Issue 2355 / EUVD-2022-50416) VulDB Updates35 min. agoCVE-2022-47660 | GPAC 2.1-DEV-rev644-g5c4df2a67 MP4Box isomedia/isom_write.c integer overflow (Issue 2357 / EUVD-2022-50419)

↗ Open analysis

6 sources

Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach

5 more sources

TechCrunch2 hours agoLab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach TechCrunch2 hours agoLab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach IT Security News3 hours agoQuest Diagnostics warns of potential data theft after attack on lab service system IT Security News3 hours agoQuest Diagnostics Data Breach Exposed ‘Certain Patient Records’ Security Magazine3 hours agoCyber Breach Hits Quest Diagnostics, Patient Records May Be Affected

↗ Open analysis

◀ VORHERIGER BEITRAG 1 Min

gRPC vs REST: How to Choose for Internal APIs

Sichere Programmierung

NÄCHSTER BEITRAG 1 Min

Unburden: What If AI Helped You Carry Less?

Sichere ProgrammierungWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

🕒 tsecurity.de Such-Trends & Chronologie

PHP2Shell Vulnerability: Percona Security Update

Cyber Threat Intelligence & Forensik

Compliance, SLA & Vendor Adherence

Hersteller-Sicherheitsmeldungen & Patch-Status

Jetzt Bewertung abgeben

Related story clusters & sources (vector AI)

PHP2Shell Vulnerability: Percona Security Update

Cyber Threat Intelligence & Forensik

Compliance, SLA & Vendor Adherence

Hersteller-Sicherheitsmeldungen & Patch-Status

Jetzt Bewertung abgeben

Related story clusters & sources (vector AI)

Mehr aus dieser Kategorie