Last week was about PHP. This week, check your database. On 21 October 2026, the PHP project shipped emergency fixes for two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, known together as PHP2Shell. Exploit details leaked before the patch, attacks started within hours, and the only real fix was to upgrade PHP or shut... Weiterlesen: Still on MariaDB 10.6? Why your next upgrade is a security decision
Intelligence View
⚡ tsecurity.de Intelligence
Still on MariaDB 10.6? Why your next upgrade is a security decision
Last week was about PHP. This week, check your database. On 21 October 2026, the PHP project shipped emergency fixes for two critical remote code execution…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
BSI-Warnung (Deutschland)CVE-2026-109618
PHP: Mehrere Schwachstellen ermöglichen Codeausführung hoch20.10.2026CISA-SSVC-Triage (vulnrichment)CVE-2026-109618
Exploitation: active (Aktiv ausgenutzt)Automatable: no (Nicht automatisierbar)Technical Impact: total (Vollständig)
Quelle: CISA-ADP vulnrichment · Stand 2026-10-21T00:00:00+00:00 · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Upstream-Referenz (Code-Hosting, kein Advisory)github.com
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
Was this page helpful?