Malwarebytes Blog
Signal bug could let someone keep listening after you hang up
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.
آرشیو ۹۰ روزه
همه اخبار
جستوجو در عنوان، خلاصه یا نام منبع. هر خبر به صفحه اصلی خودش لینک دارد.
دسته: آسیبپذیری و روز صفر
پاک کردن فیلترها
۲۱۷۰ خبر
صفحه ۱۳ از ۷۳
SOCRadar
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Flaws, Affected Versions, and How to Fix Them
PHP2Shell: two critical PHP RCE flaws (CVSS 9.2). Affected and fixed versions, why workarounds fail, detection signals, and a free exposure checker.
Infosecurity Magazine
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patches
Two critical vulnerabilities in PHP were leaked one day before their scheduled disclosure and security patches
Security Affairs
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws
PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is preparing an emergency security release for two critical vulnerabilities that could let attackers execute code remotely on affected servers. The update is scheduled for today, October 21 at 14:00 UTC, […]
Tenable Blog
php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities
Two critical PHP vulnerabilities could lead to unauthenticated remote code execution. Patches are available for supported PHP 8.x branches, and exploitation attempts began before public disclosure.Change logUpdate October 26: CISA added CVE-2026-109618 and CVE-2026-109619 to its KEV catalog. Added details on a regression in PHP 8.4.27 and 8.5.12 and on PHP's October 23 session upload progress advisory. Added a note o…
Fortinet PSIRT
PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
CVSSv3 Score: 9.8 CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this con…
Ars Technica - Technology Lab
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
CERT-FR
[Màj] Multiples vulnérabilités dans PHP (21 octobre 2026)
**[Mise à jour du 26 octobre 2026]** Le 23 octobre 2026, PHP a publié un avis de sécurité concernant la vulnérabilité CVE-2026-115560. Celle-ci permet une exécution de code arbitraire à distance. L'éditeur estime que les conditions d'exploitation exigent une combinaison d'options de configuration...
Wordfence Blog
PSA: Upcoming Critical PHP Security Release
PHP has released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities announced in this advance notice. WordPress updates won’t apply this fix, so check your PHP version and update now. See our new advisory for details. The post PSA: Upcoming Critical PHP Security Release appeared first on Wordfence.
Tenable Blog
Oracle October 2026 Critical Patch Update Addresses 1209 CVEs
Oracle addresses 1209 CVEs in its final quarterly update of 2026 with 1295 patches, including 112 critical updates.Key TakeawaysThe October 2026 Critical Patch Update (CPU) contains fixes for 1209 unique CVEs in 1295 security updates112 issues (8.6% of all patches) were assigned a critical severity ratingOracle Fusion Middleware received the highest number of patches at 206, accounting for 15.9% of all patchesBackgro…
AWS Security Bulletins
CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
Bulletin ID: 2026-141-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:30 PM PDT Description: CICD-toolchain-for-serverless-applications is an AWS sample application that provisions a CI/CD pipeline for serverless applications through the AWS Serverless Application Repository. We identified CVE-2026-112407, an incorrect privilege assignment in the IAM policy of AWS CICD-tool…
Unit 42 (Palo Alto)
Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20)
Ransomware operators including Spikey Scorpius (aka Qilin) and Tarnished Scorpius (aka Inc) are exploiting PAN-OS vulnerability CVE-2026-0257. The post Active Exploitation of May 2026 PAN-OS CVE-2026-0257 (Updated October 20) appeared first on Unit 42.
AWS Security Bulletins
CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew
Bulletin ID: 2026-140-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:00 PM PDT Description: Kiro Crew is an open-source personal AI agent that can be reached from a web dashboard, a CLI, or messaging channels such as WhatsApp, and that runs tools on the operator's machine. We identified CVE-2026-112380, an authorization issue in the WhatsApp channel and the internal subage…
Qualys Blog
The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On
Key Takeaways Teams are remediating more than ever, but exposure from the vulnerabilities that matter is still rising faster than they can keep up with. Mean time to exploitation is about −7 days. Mean time to remediate sits around +30 days. Qualys research: closures rose from 73M (2022) to 473M (2025) – 6× – while […]
Wordfence Blog
Wordfence Argus Discovers High Severity Unauthenticated PHP Object Injection in Duplicator
Wordfence Argus helped uncover CVE-2026-82814, a high-severity unauthenticated PHP object injection in Duplicator and Duplicator Pro. Update to version 5.0.0 or newer. The post Wordfence Argus Discovers High Severity Unauthenticated PHP Object Injection in Duplicator appeared first on Wordfence.
CERT/CC Vulnerability Notes
VU#645818: Xerj Console API authentication bypass leads to unauthorized credential minting
Overview An authentication bypass vulnerability in the Xerj Console API allows sessions to bypass passkey-backed requirements during token issuance. By exploiting this flaw, an attacker with an existing valid token can create independent, persistent successor credentials directly through the console API. This allows the attacker to maintain access and potentially escalate privileges within the Xerj ecosystem, even if…
CyberInsider
Signal fixes critical flaw that could keep audio active after hangup
Signal has fixed a vulnerability in its RingRTC calling library that could let a malicious call participant interfere with hangup, potentially leaving audio, and possibly video, active after the other person tries to end the call. Tracked as CVE-2026-113380, the issue affects RingRTC versions before 2.72.0. The flaw has been assigned a critical CVSS v4.0 … The post Signal fixes critical flaw that could keep audio act…
The Register - Security
Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche'
From October 26, only high and critical cases stay private as project seeks help sharing the workload
Cisco Talos
There's only so much code: the rise in vulnerability numbers
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like?
Microsoft Security Response Center
CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-83839 Windows Hyper-V Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-70337 Microsoft PowerShell Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-70074 Windows DNS Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft Security Response Center
CVE-2026-102204 Windows Subsystem for Linux Elevation of Privilege Vulnerability
Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected.
Cisco Security Advisories
Cisco Unified Intelligence Center SQL Injection Vulnerability
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could…
SOCRadar
30 Questions to Ask Before Buying an AI Pentesting Tool
“AI pentesting” now covers very different products. Some platforms plan and run attack chains on their own and return exploitation evidence for every finding. Others are vulnerability scanners with a language model summarizing the output. On a datasheet, or in a scripted demo against a vendor-prepared target, the two can look almost identical. The 30 […]
Horizon3 Attack Research
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.
Schneier on Security
Possible new Cellebrite iPhone Radio Zero-Day
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A press release from earlier this year confirms AU is a new product for 2026. […] According to Cellebrite, AU: is a “next-generation AFU vector that is more resilient to Apple’s OS changes…