Quarkslab

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 21, 2026
Last mentioned9d ago

Timeline

2 articles · newest first

PHP patches two critical remote code execution flaws

Unauthenticated code execution was demonstrated on Apache with mod_php under default settings for the memory bug.

Hacker News · securityOct 21, 15:48 UTC · 9d agoVulnerability 3 sources HN 61 points · 11 commentsCVE-2026-109618 CVE-2026-1096196 · 3 reads

Cloudflare deploys default WAF rules against php2shell PHP flaws

Cloudflare says it saw mutated exploit traffic before disclosure; free and paid WAF plans are covered by default.

Cloudflare Blogupdated Oct 21, 14:07 UTC · 9d agofirst Oct 21, 13:56 UTC · 9d agoExploit / PoCExploited5 sourcesCVE-2026-109618 CVE-2026-1096192 · 1 read

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25

Appears with

PHPproduct · 2
OpenAIorganization · 2
Wizorganization · 2
Calif.ioorganization · 1
Cloudflareorganization · 1
Califorganization · 1
Claude Mythosai model · 1
PHP Foundationvendor · 1
PHP Foundationorganization · 1
Trail of Bitsorganization · 1
Daybreak Redai model · 1

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.