News
threat-intel Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected - GBHackers cybersecurity GoDaddy Revokes Over 400,000 SSL Certificates, Putting Websites at Risk of Outages - CyberPress cybersecurity Critical Signal Messenger Flaw Could Keep Microphone Active After Users End Calls - CyberPress cybersecurity PHP Fixes Critical PHP2Shell Flaws That Could Allow Remote Code Execution - CyberPress threat-intel Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide - GBHackers cybersecurity Storm-0940 Hackers Use ARTEX AI to Automate Cloud Attacks and Establish Persistent Access - CyberPress cybersecurity Hackers Compromise LiteLLM PyPI Package to Steal AI API Keys and Cloud Credentials - CyberPress threat-intel Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up - GBHackers cybersecurity Attackers Were Already Testing PHP2Shell Exploits Before Security Patches Arrived - CyberPress threat-intel Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw - GBHackers cybersecurity Node.js Patches High-Severity RCE and TLS Certificate Bypass Vulnerabilities - CyberPress threat-intel LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks - GBHackers cybersecurity Critical GitLab RCE Flaw Lets Attackers Execute Code Without Authentication - CyberPress threat-intel PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution - GBHackers threat-intel Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released - GBHackers
1 / 15
All news ›
Threat Intel

PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution

GBHackers ·

PHP released emergency security updates to address two critical vulnerabilities that could allow unauthenticated attackers to execute code on vulnerable servers. These vulnerabilities are tracked as CVE-2026-109618 and CVE-2026-109619, and both have a CVSS v4.0 score of 9.2. The fixes are included in PHP versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Administrators should update immediately, as […] The post PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.