News
cybersecurity Ransomware Hackers Use Claude AI to Plan Attacks Against 62 Organizations, Researchers Reveal - CyberPress threat-intel INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds - GBHackers cybersecurity Microsoft Changes Bug Bounty Rules, Requires Detailed Proof of Concept for Higher Rewards - CyberPress threat-intel Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards - GBHackers cybersecurity Hackers Compromise 333 Tor Exit Nodes to Intercept SSH Connections and Steal Passwords - CyberPress threat-intel Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites - GBHackers cybersecurity PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert - The Hacker News threat-intel eMudhra Security Incident Exposes Weak Private Keys Used to Sign Trusted Certificates - GBHackers threat-intel Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk - GBHackers cybersecurity PHP warns it plans to release 2 emergency patches imminently - Ars Technica Security cybersecurity What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) - Aikido Security cybersecurity Stolen UpdraftCentral keys used to backdoor WordPress sites - BleepingComputer vulnerability 2026-018: Critical Vulnerabilities in PHP - CERT-EU Security Advisories vulnerability Oracle October 2026 Critical Patch Update Addresses 1209 CVEs - Tenable Security Research cybersecurity Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys - Dark Reading
1 / 15
All news ›
Threat Intel

Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk

GBHackers ·

The PHP security team has announced an upcoming release that will address two critical vulnerabilities, each rated 9.2 under CVSS v4.0. This warning, published on October 20, 2026, advises administrators to prepare for immediate upgrades. Additionally, watchTowr has reported two potential remote code execution (RCE) vulnerabilities. However, PHP has not yet confirmed their identifiers or […] The post Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.