Post

The other gigantic security issue of the day was a warning there was a remote exploit in all versions of PHP. The have posted the details now. This feels like an atomic bomb sort of exploit. So much of the internet is Wordpress, Drupal, etc.

sansec.ioPHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619)PHP released fixes for two critical remote code execution bugs on October 21. They affect every web server running PHP 5.4 or later. Researchers confirmed un...

No replies yet.