Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated with a United States government-affiliated environment, according to Dream researchers. Discovered on October 25, the operation progressed from exposed firewall management interfaces to... Weiterlesen: Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 F…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Exploit PHP2Shell Vulnerabilities to Gain Root Access on 25 Firewall Servers
Hackers chained PHP2Shell vulnerabilities with a Linux kernel privilege escalation flaw to gain root access on 25 servers, including three systems associated…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Niniejsze sprawozdanie w innych źródłach
Powiązany klaster opowieści i źródła (wektor AI)
25 źródeł
CVE-2023-54227 | Linux Kernel up to 6.5.4 /mnt nr_hw_queues memory leak (Nessus ID 319348 / WID-SEC-2025-2941)
24 kolejnych źródeł
IIT Security Newsvor 2 Std.Hackers Chain PHP2Shell and Linux Kernel Exploits to Gain Root Access on 25 Servers VVulDB Updatesvor 6 Std.CVE-2023-54196 | Linux Kernel up to 5.15.112/6.1.80/6.3.3 ntfs3 null pointer dereference VVulDB Updatesvor 6 Std.CVE-2023-54192 | Linux Kernel up to 6.1.28/6.2.15/6.3.2 f2fs __replace_atomic_write_block null pointer dereference (Nessus ID 281732) LLinux, GNU/Linux, free soft…vor 11 Std.Linux Kernel Developers Considering Removal Of KGDB Debugging Functionality VVulDB Updatesvor 8 Std.CVE-2023-53696 | Linux Kernel up to 5.15.106/6.1.23/6.2.10 scsi qla2x00_probe_one initialization (Nessus ID 284764 / WID-SEC-2025-2394) VVulDB Updatesvor 8 Std.CVE-2023-53695 | Linux Kernel up to 6.2.2 UDF File Parser privilege escalation (Nessus ID 276910 / WID-SEC-2025-2394)
+18
12 źródeł
CVE-2026-116839 | Ubiquiti airMAX M up to 6.3.25 cross-site request forgery (EUVD-2026-110579)
11 kolejnych źródeł
VVulDB Updatesvor 2 Std.CVE-2026-96666 | Schema App Structured Data Plugin up to 2.3.2 on WordPress Remove Microdata Output Filter cross site scripting (EUVD-2026-112589) VVulDB Updatesvor 2 Std.CVE-2026-96669 | wpscripts Food Store Plugin up to 1.5.5 on WordPress Cookie service_type/type cross site scripting (EUVD-2026-112586) VVulDB Updatesvor 2 Std.CVE-2026-96741 | mlfactory DSGVO All in one for WP Plugin up to 5.0 on WordPress Comment Content cross site scripting (EUVD-2026-112585) VVulDB Updatesvor 2 Std.CVE-2026-66092 | Apereo openEQUELLA up to 2026.1 Pre-Login Notice /api/preloginnotice cross site scripting (EUVD-2026-112568) VVulDB Updatesvor 2 Std.CVE-2026-113409 | Canva Ortto Plugin up to 1.0.24 cross site scripting (EUVD-2026-112571) VVulDB Updatesvor 2 Std.CVE-2026-16889 | Apereo openEQUELLA up to 2026.0 Image Upload Endpoint image name cross site scripting (EUVD-2026-112563)
+5
7 źródeł
CVE-2026-93757 | Wild Apricot Login Plugin up to 1.0.18 on WordPress SSO Authentication Module.php syncWaContact improper authentication (EUVD-2026-112591)
6 kolejnych źródeł
VVulDB Updatesvor 2 Std.CVE-2026-96228 | sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress Login final_login_ajax_action sslcare_login_phone/cap_data improper authentication (EUVD-2026-112590) VVulDB Updatesvor 2 Std.CVE-2026-93904 | dejanmarkovic Social Web Suite Plugin up to 4.1.12 on WordPress exclude_posts sql injection (EUVD-2026-112588) VVulDB Updatesvor 2 Std.CVE-2026-93855 | brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress Shortcode subscriberid sql injection (EUVD-2026-112587) VVulDB Updatesvor 2 Std.CVE-2026-109516 | guruteam Bot for Telegram Plugin up to 1.3.0 on WordPress REST Endpoint main bftow_get_user_system_id tgId improper authentication (EUVD-2026-112584) VVulDB Updatesvor 6 Std.CVE-2026-107100 | Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress information disclosure (WID-SEC-2026-4184) VVulDB Updatesvor 6 Std.CVE-2026-97255 | WProyal Royal Elementor Addons Plugin up to 1.7.1069 on WordPress authorization (WID-SEC-2026-4184)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4305368/wiadomoci-o-bezpieczestwie-it/hackers-exploit-php2shell-vulnerabilities-to-gain-root-access-on-25-firewall-servers/