Shopware

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 20, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

Talos tracks two unauthenticated PHP core RCEs called php2shell

Talos had not seen exploitation as of October 21 and says about half of PHP systems may never be patched.

Cisco Talosupdated Oct 21, 23:02 UTC · 3d agofirst Oct 21, 15:10 UTC · 4d agoVulnerability 30 sourcesCVE-2026-109618 CVE-2026-1096192 · 2 reads

PHP to fix two critical RCEs, CVE-2026-109618 and CVE-2026-109619

The official fix is due October 21 at 14:00 UTC; PHP 8.1 and older will not get one.

Sansec (Magento / e-commerce security)updated Oct 21, 13:40 UTC · 4d agofirst Oct 20, 22:48 UTC · 4d agoVulnerability 30 sourcesCVE-2026-109618 CVE-2026-10961935 · 7 reads

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 4d agophpPoC ×13
CVE-2026-10961812%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 4d agophpPoC ×25

Appears with

PHPproduct · 2
Magentoproduct · 2
WooCommerceproduct · 2
Cisco Talosorganization · 1
WordPressproduct · 1
watchTowrorganization · 1
Pleskproduct · 1
Drupalproduct · 1
cPanelproduct · 1
PHP2Shellmalware · 1
Laravelproduct · 1

Entities are extracted by the model from each article. First seen Oct 20, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.