În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
PHP2Shell Vulnerability Gets a Public PoC Exploit for Security Testing
A public proof-of-concept repository shares verification tools and a lab setup to test two critical PHP vulnerabilities known as php2shell. The flaws, tracked by researchers as CVE-2026-109618 and CVE-2026-109619, are reported to affect PHP’s session.upload_progress feature and could lead to remote code execution under certain conditions. The release adds technical detail to a fast-moving security […] The post PHP2Shell Vulnerability Gets a Public PoC Exploit for Security Testing appeared first on Cyber Security News.
A public proof-of-concept repository shares verification tools and a lab setup to test two critical PHP vulnerabilities known as php2shell. The flaws, tracked by researchers as CVE-2026-109618 and CVE-2026-109619, are reported to affect PHP’s session.upload_progress feature and could lead to remote code execution under certain conditions. The release adds technical detail to a fast-moving security issue. PHP’s security team announced that an emergency release would address two critical vulnerabilities, each rated 9.2 under CVSS v4.0, and urged users to prepare to upgrade. Its notice scheduled the release for October 21 at 14:00 UTC. At the time of writing, that…
Extras afișat conform termenilor RSS ai publicației · 99 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
[AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
Latent Space · 22 oct. 2026
Cloudflare deploys protections against php2shell vulnerability
Cloudflare Blog · 21 oct. 2026
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): Detecting unauthenticated remote code execution in PHP core
Sysdig Blog · 22 oct. 2026
Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year
Cybersecurity News · 22 oct. 2026