Search: “php”

2 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 397 Malware 309 Exploit / PoC 181 Ransomware 139 Threat actor 79 Data breach 55 Phishing & fraud 36 Industry 19 Advisory 9 Research 7 Tools 5 Policy & legal 5 AI tools & infra 5 AI safety & security 5

SeverityAll critical 477 high 456 medium 261 low 40 info 19

USN-8743-1: PHP vulnerabilities

Ubuntu fixes three PHP flaws, including SQL injection in the PostgreSQL extension (CVE-2026-17543) and an out-of-bounds write in bccomp().

Ubuntu Security Notice USN-8743-1 patches three vulnerabilities in PHP. CVE-2026-17543 involves incorrect backslash escaping in the PostgreSQL extension enabling SQL injection. CVE-2026-17544 is an out-of-bounds write in bccomp() that could cause denial of service or arbitrary code execution on Ubuntu 26.04 LTS, and CVE-2026-7260 causes unbounded recursion via circular symlinks in phar archives.

Ubuntu Security Noticesupdated Sep 11, 12:03 UTC · 5d agofirst Sep 10, 11:48 UTC · 6d agoAdvisory 13 sources CVE-2026-17543 CVE-2026-17544 CVE-2026-72601

All-Line Equipment Company Fuel-Boss

CISA warns All-Line Equipment Fuel-Boss product versions contain flaws enabling remote command or code execution; fixes are available for some variants only.

CISA published ICS advisory ICSA-26-239-02 covering vulnerabilities in All-Line Equipment Company Fuel-Boss products, including the V1 Standard, V1 Portal, V1 Master/Slave, and V1 Backflush. Successful exploitation could allow attackers to execute arbitrary commands or code remotely on affected systems. Vendor fixes are available for Fuel-Boss V1 Standard and V1 Portal, fixes are not yet available for V1 Master/Slave, and no fix is planned for V1 Backflush. Customers are directed to contact All-Line Equipment Company for remediation instructions.

CISA AdvisoriesAug 27, 12:00 UTC · 20d agoAdvisory