News
threat-intel North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign - GBHackers cybersecurity Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU - SecurityWeek cybersecurity Japan’s GMO Internet Shuts Down Cloud Service After Hackers Plant Malware, 26,739 Servers at Risk - CyberPress threat-intel Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected - GBHackers cybersecurity GoDaddy Revokes Over 400,000 SSL Certificates, Putting Websites at Risk of Outages - CyberPress cybersecurity Critical Signal Messenger Flaw Could Keep Microphone Active After Users End Calls - CyberPress cybersecurity PHP Fixes Critical PHP2Shell Flaws That Could Allow Remote Code Execution - CyberPress threat-intel Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide - GBHackers cybersecurity Storm-0940 Hackers Use ARTEX AI to Automate Cloud Attacks and Establish Persistent Access - CyberPress cybersecurity Hackers Compromise LiteLLM PyPI Package to Steal AI API Keys and Cloud Credentials - CyberPress threat-intel Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up - GBHackers cybersecurity Attackers Were Already Testing PHP2Shell Exploits Before Security Patches Arrived - CyberPress threat-intel Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw - GBHackers cybersecurity Node.js Patches High-Severity RCE and TLS Certificate Bypass Vulnerabilities - CyberPress threat-intel LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks - GBHackers
1 / 15
All news ›
Cybersecurity

PHP Fixes Critical PHP2Shell Flaws That Could Allow Remote Code Execution

CyberPress ·

The PHP project released PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 on October 21, 2026, to address two critical PHP2Shell vulnerabilities. Tracked as CVE-2026-109618 and CVE-2026-109619, both carry CVSS v4.0 scores of 9.2 and can enable unauthenticated remote code execution under specific conditions. PHP identifies all installations serving web requests as potentially at risk, including PHP-FPM, […] The post PHP Fixes Critical PHP2Shell Flaws That Could Allow Remote Code Execution appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.