NCSC Netherlands

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 21, 2026
Last mentioned4d ago

Timeline

1 articles · newest first

PHP patches critical unauthenticated RCE flaws called PHP2Shell

PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12 fix two web-worker RCE bugs; in-the-wild attacks are not established.

Horizon3.aiupdated Oct 21, 23:02 UTC · 3d agofirst Oct 21, 14:50 UTC · 4d agoVulnerability 30 sourcesCVE-2026-109618 CVE-2026-1096192 · 1 read

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 4d agophpPoC ×13
CVE-2026-10961812%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 4d agophpPoC ×25

Appears with

Apache mod_phpproduct · 1
Horizon3.aiorganization · 1
PHPvendor · 1
PHP-FPMproduct · 1
CERT-EUorganization · 1

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.