Topic

Cve 2026 109618

Coverage tagged cve 2026 109618.

Articles: 1
Desk: 1

Data graphic: editorial cover for PHP2Shell, two unauthenticated PHP core remote code execution bugs rated CVSS v4.0 9.2 critical , shown as a giant 9.2 with a CRITICAL stamp. PHP has patched four branches, but PAN-OS and Panorama have no fix, and the first exploit attempt was seen on 17 Oct by Amazon MadPot.

criticalExploits Cve 2026 109618

PHP2Shell: Two Pre-Auth PHP RCEs Are Patched, but PAN-OS, Panorama and Cisco Expressway Still Wait

CVE-2026-109618 and CVE-2026-109619 give unauthenticated RCE in PHP core. Fixes shipped 21 Oct, attempts began 17 Oct, and PAN-OS has no fix yet.

Oct 22 · 9 min