Unit 42 warns of two critical PHP RCE flaws scored 9.2
Unit 42 says it has seen proof-of-concept code and telemetry showing over 22.6 million potentially exposed instances.
78
Product
Cortex Xpanse
- Mentions · 7d0
- Mentions · 30d1
- All mentions6
- First seenAug 17, 2026
- Last mentioned9d ago
Timeline
6 articles · newest firstCortex Xpanse
Palo Alto Unit 42 Cortex Xpanse product-category page published with no article text available for classification.
10
Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild
Attackers actively exploit CVE-2025-32433, a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH, heavily targeting OT and critical infrastructure networks.
90
Automatically Detecting DNS Hijacking in Passive DNS
Unit 42's machine learning pipeline detected 6,729 DNS hijacking events between March and September 2024, hitting political parties, ISPs, and universities.
45
Threat Brief: Atlassian Confluence Remote Code Execution Vulnerability (CVE-2022
Unauthenticated Confluence RCE CVE-2022-26134 was exploited in the wild; Volexity observed intrusions and Cerber ransomware on unpatched servers.
80
Threat Brief: 3CXDesktopApp Supply Chain Attack (Updated)
Trojanized 3CXDesktopApp installers for Windows and macOS loaded RC4-encrypted shellcode delivering a backdoor to hundreds of thousands of 3CX users.
72
Related CVEs
by mentions- CVE-2025-3243399%10.0Unauthenticated RCE in Erlang/OTP SSH Server
- CVE-2022-26134100%9.8Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
Appears with
- Palo Alto Networksvendor · 6
- Unit 42organization · 5
- Cortex XDRproduct · 4
- Palo Alto Networksorganization · 2
- Cortex XSIAMproduct · 2
- PHP Groupvendor · 1
- Advanced DNS Securityproduct · 1
- Cortex Xpansevendor · 1
- Erlang/OTPvendor · 1
- Atlassianvendor · 1
- Hungarian political partyvictim · 1
- Atlassianorganization · 1
- Atlassian Confluence Serverproduct · 1
- Cortex XSIAMvendor · 1
- Erlang/OTP SSHproduct · 1
- 3CXDesktopAppproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.