PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php,... Weiterlesen: New Serious PHP Vulnerabilities Released and Patched
Intelligence View
⚡ tsecurity.de Intelligence
New Serious PHP Vulnerabilities Released and Patched
PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
45 Quellen
Linux security vulnerabilities fixed per kernel version
44 weitere Quellen
VVulDB Updates8 uur geledenCVE-2026-90164 | Linux Kernel up to 7.2.5 ksmbd ksmbd_server_init allocation of resources (WID-SEC-2026-3444) VVulDB Updates8 uur geledenCVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference (WID-SEC-2026-3444) VVulDB Updates8 uur geledenCVE-2026-90165 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_stop_durable_scavenger null pointer dereference (WID-SEC-2026-3444) VVulDB Updates8 uur geledenCVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444) VVulDB Updates8 uur geledenCVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444) VVulDB Updates8 uur geledenCVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444)
+38
6 Quellen
CVE-2026-97839 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100440)
5 weitere Quellen
VVulDB Updates8 uur geledenCVE-2026-97838 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100439) VVulDB Updates8 uur geledenCVE-2026-97837 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100438) VVulDB Updates8 uur geledenCVE-2026-97836 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100437) VVulDB Updates8 uur geledenCVE-2026-97835 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100436) VVulDB Updates8 uur geledenCVE-2026-97834 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100435)
6 Quellen
CVE-2025-64213 | StylemixThemes MasterStudy LMS Pro Plugin up to 4.7.16 on WordPress insertion of sensitive information into sent data
5 weitere Quellen
VVulDB Updates8 uur geledenCVE-2025-60182 | Schiocco Support Board Plugin up to 3.8.7 on WordPress cross site scripting VVulDB Updates8 uur geledenCVE-2025-64193 | 8theme XStore Plugin up to 9.6.1 on WordPress php file inclusion VVulDB Updates8 uur geledenCVE-2025-64376 | CridioStudio ListingPro Plugin up to 2.9.10 on WordPress cross site scripting VVulDB Updates8 uur geledenCVE-2025-64189 | 8theme XStore Core Plugin up to 5.6 on WordPress cross site scripting VVulDB Updates6 uur geledenCVE-2026-34885 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress sql injection
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4290090/beveiligingslekken-cve/new-serious-php-vulnerabilities-released-and-patched/