Security

1 Articles

CVE-2026-109618: PHP2Shell Hits All PAN-OS Versions

CVE-2026-109618: PHP2Shell affects all PAN-OS and Panorama versions with no fix yet. Threat IDs, scope and workarounds explained.

Security —— Oct 23, 2026 5 min read

Fortinet patched AI-found critical flaws in FortiOS 7.4.13, 7.6.8 and 8.0.2, plus FortiManager and FortiAnalyzer. CVEs…

Linux —— Oct 23, 2026 6 min read

Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who…

Security —— Oct 23, 2026 7 min read

US banks including Morgan Stanley and JPMorgan are finding unauthorized AI agents in customer accounts, some…

Security —— Oct 22, 2026 13 min read

eMudhra is exiting global TLS after 8 CA keys, one literally the number 4, proved crackable.…

Security —— Oct 22, 2026 6 min read

A researcher claims RCE on fully patched PHP 8.5.12 — but the PHP2Shell bypass PoC is…

Security —— Oct 22, 2026 4 min read

CVE-2026-94300 in BIND 9 lets attackers corrupt memory via GSS-TSIG replay, risking DNS crashes and RCE.…

Security —— Oct 22, 2026 3 min read

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.

Security —— Oct 22, 2026 5 min read

Imperva's Node2Shell research shows Node.js Brotli flaw CVE-2026-111497 can give RCE. Fixes are in 26.12.1, 24.22.1…

Security —— Oct 21, 2026 9 min read

php2shell (CVE-2026-109618, CVE-2026-109619): critical unauthenticated RCE in PHP core. Patch out Oct 21. WordPress, Magento, Drupal…