Critical PHP RCE flaws leaked a day before scheduled patches
CERT-EU told operators to prepare to patch or isolate internet-facing PHP apps; the PHP team rates the flaws CVSS 9.2, not 10.
Stories per day · 30 days
2 RSS
Relatedphp3remote-code-execution3active-exploitation1asyncos1cisco1cve-2026-765191emergency-patch1ncsc1path-traversal1php2shell1pre-disclosure1secure-email-gateway1unauthenticated1watchtowr1
14 stories, newest first · one card per story
Stories tagged #cert-eu
PHP warns of two critical flaws, patches due October 21
Each flaw is rated CVSS v4.0 9.2; PHP has not confirmed CVE IDs, versions, or remote code execution.
4
PHP flaws CVE-2026-109618 and CVE-2026-109619 may allow unauthenticated RCE
CERT-EU says details are unpublished, every PHP release since PHP 5 may be affected, and the fix is set for 21 October at 14:00 UTC.
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Actively exploited CVE-2026-76519 lets unauthenticated attackers gain root on Cisco Secure Email Gateway.
4
2026-016: Critical Vulnerability in GitLab CE and EE
GitLab patches critical CVE-2026-97229 (CVSS 10.0) allowing unauthenticated RCE via CI/CD regex compiler, plus 23 other security issues in CE/EE versions.
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
CERT-EU warns two critical Citrix NetScaler RCE flaws are exploited in the wild and urges immediate patching.
2026-013: Critical Vulnerability in F5 BIG-IP APM
CERT-EU says exploited F5 BIG-IP APM flaw CVE-2026-94127 allows unauthenticated remote code execution.
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP patched two critical flaws, OVERPASS (CVE-2026-44756, CVSS 10.0) and S4GET (CVE-2026-58240), allowing unauthenticated attackers to execute OS commands on SAP hosts.
4
2026-007: Critical Vulnerability in Windows Netlogon
Actively exploited CVSS 9.8 Windows Netlogon flaw lets unauthenticated attackers execute code with SYSTEM privileges on domain controllers.
4
2026-004: Critical Vulnerability in SharePoint Exploited
CVE-2026-20963 (CVSS 9.8), an unauthenticated RCE in on-prem SharePoint, was added to CISA's KEV on 18 March 2026 and is actively exploited.
3
2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
Citrix patched NetScaler ADC/Gateway: auth bypass CVE-2026-19490 (CVSS 9.3) on Gateway/AAA configs and memory overflow CVE-2026-19489 (CVSS 8.8) requiring SIP ALG.
4
2026-006: Critical Vulnerability in PAN-OS
Palo Alto Networks PAN-OS User-ID Authentication Portal flaw allows unauthenticated root RCE; limited exploitation observed and patches still pending.
1
2026-002: Multiple Vulnerabilities in Cisco Products
Cisco fixed SD-WAN Controller auth bypass CVE-2026-20127 (CVSS 10) exploited in the wild since 2023, plus several critical and high flaws in SD-WAN Manager.
2026-001: Critical vulnerabilities in Ivanti EPMM
Ivanti EPMM has two critical CVSS 9.8 flaws allowing unauthenticated remote code execution; limited exploitation has already been observed.