registry.itservicenet.net/secure-container/its-nextcloud-enterprise:v30.0.17.14-zero-cve (wolfi 20230201) - Trivy Report - 2026-11-01 04:07:27.875994031 +0000 UTC m=+0.156547997

wolfi
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ca-certificates	CVE-2026-91403	CRITICAL	20260909-r1	20260909-r3	https://access.redhat.com/security/cve/CVE-2026-91403 https://nvd.nist.gov/vuln/detail/CVE-2026-91403 https://openjdk.org/groups/vulnerability/advisories/2026-10-21 https://www.cve.org/CVERecord?id=CVE-2026-91403 https://www.oracle.com/security-alerts/alert-cve-2026-91403.html
ca-certificates	CVE-2026-111943	HIGH	20260909-r1	20260909-r3	http://www.openwall.com/lists/oss-security/2026/10/20/29 https://access.redhat.com/errata/RHSA-2026:91719 https://access.redhat.com/errata/RHSA-2026:91720 https://access.redhat.com/security/cve/CVE-2026-111943 https://bugzilla.redhat.com/2556068 https://bugzilla.redhat.com/show_bug.cgi?id=2556068 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943 https://errata.almalinux.org/9/ALSA-2026-91719.html https://errata.rockylinux.org/RLSA-2026:91720 https://github.com/golang/go/issues/82345 https://go.dev/cl/851047 https://go.dev/issue/82345 https://groups.google.com/g/golang-announce/c/66pojueaQek https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU https://linux.oracle.com/cve/CVE-2026-111943.html https://linux.oracle.com/errata/ELSA-2026-91720.html https://nvd.nist.gov/vuln/detail/CVE-2026-111943 https://pkg.go.dev/vuln/GO-2026-6809 https://www.cve.org/CVERecord?id=CVE-2026-111943
ca-certificates-bundle	CVE-2026-91403	CRITICAL	20260611-r1	20260909-r3	https://access.redhat.com/security/cve/CVE-2026-91403 https://nvd.nist.gov/vuln/detail/CVE-2026-91403 https://openjdk.org/groups/vulnerability/advisories/2026-10-21 https://www.cve.org/CVERecord?id=CVE-2026-91403 https://www.oracle.com/security-alerts/alert-cve-2026-91403.html
ca-certificates-bundle	CVE-2026-111943	HIGH	20260611-r1	20260909-r3	http://www.openwall.com/lists/oss-security/2026/10/20/29 https://access.redhat.com/errata/RHSA-2026:91719 https://access.redhat.com/errata/RHSA-2026:91720 https://access.redhat.com/security/cve/CVE-2026-111943 https://bugzilla.redhat.com/2556068 https://bugzilla.redhat.com/show_bug.cgi?id=2556068 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111943 https://errata.almalinux.org/9/ALSA-2026-91719.html https://errata.rockylinux.org/RLSA-2026:91720 https://github.com/golang/go/issues/82345 https://go.dev/cl/851047 https://go.dev/issue/82345 https://groups.google.com/g/golang-announce/c/66pojueaQek https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU https://linux.oracle.com/cve/CVE-2026-111943.html https://linux.oracle.com/errata/ELSA-2026-91720.html https://nvd.nist.gov/vuln/detail/CVE-2026-111943 https://pkg.go.dev/vuln/GO-2026-6809 https://www.cve.org/CVERecord?id=CVE-2026-111943
curl	CVE-2026-92392	HIGH	8.22.0-r3	8.23.0-r0	http://www.openwall.com/lists/oss-security/2026/10/18/5 http://www.openwall.com/lists/oss-security/2026/10/18/6 https://access.redhat.com/security/cve/CVE-2026-92392 https://curl.se/docs/CVE-2026-92392.html https://curl.se/docs/CVE-2026-92392.json https://hackerone.com/reports/4030333 https://nvd.nist.gov/vuln/detail/CVE-2026-92392 https://ubuntu.com/security/notices/USN-8927-1 https://ubuntu.com/security/notices/USN-8927-2 https://www.cve.org/CVERecord?id=CVE-2026-92392
glibc-2.44	CVE-2026-8674	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/17/4 https://access.redhat.com/errata/RHSA-2026:84753 https://access.redhat.com/security/cve/CVE-2026-8674 https://bugzilla.redhat.com/2523274 https://bugzilla.redhat.com/2524870 https://bugzilla.redhat.com/2525256 https://bugzilla.redhat.com/2536382 https://bugzilla.redhat.com/show_bug.cgi?id=2523274 https://bugzilla.redhat.com/show_bug.cgi?id=2524870 https://bugzilla.redhat.com/show_bug.cgi?id=2525256 https://bugzilla.redhat.com/show_bug.cgi?id=2536382 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18374 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77117 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80489 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8674 https://errata.almalinux.org/10/ALSA-2026-84753.html https://errata.rockylinux.org/RLSA-2026:84753 https://joshua.hu/fuzzing-glibc-libresolv https://nvd.nist.gov/vuln/detail/CVE-2026-8674 https://sourceware.org/bugzilla/show_bug.cgi?id=31026 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021 https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a https://www.cve.org/CVERecord?id=CVE-2026-8674
glibc-2.44	CVE-2026-86805	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-86805 https://nvd.nist.gov/vuln/detail/CVE-2026-86805 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0022 https://www.cve.org/CVERecord?id=CVE-2026-86805
glibc-2.44	CVE-2026-89092	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/11/2 https://access.redhat.com/security/cve/CVE-2026-89092 https://nvd.nist.gov/vuln/detail/CVE-2026-89092 https://sourceware.org/bugzilla/show_bug.cgi?id=34624 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0016 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016 https://www.cve.org/CVERecord?id=CVE-2026-89092
glibc-2.44	CVE-2026-95818	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-95818 https://nvd.nist.gov/vuln/detail/CVE-2026-95818 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0023 https://www.cve.org/CVERecord?id=CVE-2026-95818
glibc-2.44-locale-posix	CVE-2026-8674	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/17/4 https://access.redhat.com/errata/RHSA-2026:84753 https://access.redhat.com/security/cve/CVE-2026-8674 https://bugzilla.redhat.com/2523274 https://bugzilla.redhat.com/2524870 https://bugzilla.redhat.com/2525256 https://bugzilla.redhat.com/2536382 https://bugzilla.redhat.com/show_bug.cgi?id=2523274 https://bugzilla.redhat.com/show_bug.cgi?id=2524870 https://bugzilla.redhat.com/show_bug.cgi?id=2525256 https://bugzilla.redhat.com/show_bug.cgi?id=2536382 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18374 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77117 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80489 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8674 https://errata.almalinux.org/10/ALSA-2026-84753.html https://errata.rockylinux.org/RLSA-2026:84753 https://joshua.hu/fuzzing-glibc-libresolv https://nvd.nist.gov/vuln/detail/CVE-2026-8674 https://sourceware.org/bugzilla/show_bug.cgi?id=31026 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021 https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a https://www.cve.org/CVERecord?id=CVE-2026-8674
glibc-2.44-locale-posix	CVE-2026-86805	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-86805 https://nvd.nist.gov/vuln/detail/CVE-2026-86805 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0022 https://www.cve.org/CVERecord?id=CVE-2026-86805
glibc-2.44-locale-posix	CVE-2026-89092	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/11/2 https://access.redhat.com/security/cve/CVE-2026-89092 https://nvd.nist.gov/vuln/detail/CVE-2026-89092 https://sourceware.org/bugzilla/show_bug.cgi?id=34624 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0016 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016 https://www.cve.org/CVERecord?id=CVE-2026-89092
glibc-2.44-locale-posix	CVE-2026-95818	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-95818 https://nvd.nist.gov/vuln/detail/CVE-2026-95818 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0023 https://www.cve.org/CVERecord?id=CVE-2026-95818
ld-linux-2.44	CVE-2026-8674	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/17/4 https://access.redhat.com/errata/RHSA-2026:84753 https://access.redhat.com/security/cve/CVE-2026-8674 https://bugzilla.redhat.com/2523274 https://bugzilla.redhat.com/2524870 https://bugzilla.redhat.com/2525256 https://bugzilla.redhat.com/2536382 https://bugzilla.redhat.com/show_bug.cgi?id=2523274 https://bugzilla.redhat.com/show_bug.cgi?id=2524870 https://bugzilla.redhat.com/show_bug.cgi?id=2525256 https://bugzilla.redhat.com/show_bug.cgi?id=2536382 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18374 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77117 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80489 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8674 https://errata.almalinux.org/10/ALSA-2026-84753.html https://errata.rockylinux.org/RLSA-2026:84753 https://joshua.hu/fuzzing-glibc-libresolv https://nvd.nist.gov/vuln/detail/CVE-2026-8674 https://sourceware.org/bugzilla/show_bug.cgi?id=31026 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021 https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a https://www.cve.org/CVERecord?id=CVE-2026-8674
ld-linux-2.44	CVE-2026-86805	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-86805 https://nvd.nist.gov/vuln/detail/CVE-2026-86805 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0022 https://www.cve.org/CVERecord?id=CVE-2026-86805
ld-linux-2.44	CVE-2026-89092	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/11/2 https://access.redhat.com/security/cve/CVE-2026-89092 https://nvd.nist.gov/vuln/detail/CVE-2026-89092 https://sourceware.org/bugzilla/show_bug.cgi?id=34624 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0016 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016 https://www.cve.org/CVERecord?id=CVE-2026-89092
ld-linux-2.44	CVE-2026-95818	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-95818 https://nvd.nist.gov/vuln/detail/CVE-2026-95818 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0023 https://www.cve.org/CVERecord?id=CVE-2026-95818
libbrotlicommon1	CVE-2026-111497	CRITICAL	1.2.0-r5	1.2.0-r7	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 https://access.redhat.com/errata/RHSA-2026:90449 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90449 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libbrotlidec1	CVE-2026-111497	CRITICAL	1.2.0-r5	1.2.0-r7	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 https://access.redhat.com/errata/RHSA-2026:90449 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90449 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libbrotlienc1	CVE-2026-111497	CRITICAL	1.2.0-r5	1.2.0-r7	http://www.openwall.com/lists/oss-security/2026/10/23/25 http://www.openwall.com/lists/oss-security/2026/10/24/6 http://www.openwall.com/lists/oss-security/2026/10/26/12 http://www.openwall.com/lists/oss-security/2026/10/26/13 http://www.openwall.com/lists/oss-security/2026/10/26/16 https://access.redhat.com/errata/RHSA-2026:90449 https://access.redhat.com/errata/RHSA-2026:92492 https://access.redhat.com/security/cve/CVE-2026-111497 https://advisory.echohq.com/cve/CVE-2026-111497 https://broccoli2shell.com https://bugzilla.redhat.com/2558973 https://bugzilla.redhat.com/2562054 https://bugzilla.redhat.com/show_bug.cgi?id=2558973 https://cert-portal.siemens.com/productcert/html/ssa-045512.html https://cert-portal.siemens.com/productcert/html/ssa-443410.html https://cert-portal.siemens.com/productcert/html/ssa-898633.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-111497 https://devblogs.microsoft.com/dotnet/dotnet-october-2026-oob-security-updates https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/ https://errata.almalinux.org/9/ALSA-2026-92492.html https://errata.rockylinux.org/RLSA-2026:90449 https://github.com/advisories/GHSA-9v8h-qqgm-4m35 https://github.com/andybalholm/brotli/releases/tag/v1.2.7 https://github.com/dotnet/announcements/issues/494 https://github.com/google/brotli https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b https://github.com/google/brotli/commit/50a9b70a4d5e1443fc40927952276b68fffa83a0 https://github.com/google/brotli/commit/b418fa81c48262a86a95332b0bc6d62c30aa78b6 https://github.com/google/brotli/commit/da9806362874b9bd4b552a3af360b5d6347beb12 https://github.com/google/brotli/releases/tag/v1.0.10 https://github.com/google/brotli/releases/tag/v1.1.1 https://github.com/google/brotli/releases/tag/v1.2.1 https://github.com/pypa/advisory-database/tree/main/vulns/brotli/PYSEC-2026-4322.yaml https://github.com/pypa/advisory-database/tree/main/vulns/brotlicffi/PYSEC-2026-4323.yaml https://linux.oracle.com/cve/CVE-2026-111497.html https://linux.oracle.com/errata/ELSA-2026-92492.html https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148 https://nodejs.org/en/blog/vulnerability/october-2026-security-releases https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high https://nvd.nist.gov/vuln/detail/CVE-2026-111497 https://opensourcemalware.com/blog/node2shell-affects-python https://patchtheplanet.org/brotli https://pypi.org/project/Brotli https://pypi.org/project/brotlicffi https://ubuntu.com/security/notices/USN-8956-1 https://ubuntu.com/security/notices/USN-8956-2 https://ubuntu.com/security/notices/USN-8958-1 https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497 https://www.cve.org/CVERecord?id=CVE-2026-111497
libcrypt1-2.44	CVE-2026-8674	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/17/4 https://access.redhat.com/errata/RHSA-2026:84753 https://access.redhat.com/security/cve/CVE-2026-8674 https://bugzilla.redhat.com/2523274 https://bugzilla.redhat.com/2524870 https://bugzilla.redhat.com/2525256 https://bugzilla.redhat.com/2536382 https://bugzilla.redhat.com/show_bug.cgi?id=2523274 https://bugzilla.redhat.com/show_bug.cgi?id=2524870 https://bugzilla.redhat.com/show_bug.cgi?id=2525256 https://bugzilla.redhat.com/show_bug.cgi?id=2536382 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18374 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-77117 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80489 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-8674 https://errata.almalinux.org/10/ALSA-2026-84753.html https://errata.rockylinux.org/RLSA-2026:84753 https://joshua.hu/fuzzing-glibc-libresolv https://nvd.nist.gov/vuln/detail/CVE-2026-8674 https://sourceware.org/bugzilla/show_bug.cgi?id=31026 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0021 https://sourceware.org/git/?p=glibc.git;a=commit;h=506ea57086bfb9ce3daff1c14246a1cb532aba0a https://www.cve.org/CVERecord?id=CVE-2026-8674
libcrypt1-2.44	CVE-2026-86805	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-86805 https://nvd.nist.gov/vuln/detail/CVE-2026-86805 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0022 https://www.cve.org/CVERecord?id=CVE-2026-86805
libcrypt1-2.44	CVE-2026-89092	MEDIUM	2.44-r6	2.44-r8	http://www.openwall.com/lists/oss-security/2026/09/11/2 https://access.redhat.com/security/cve/CVE-2026-89092 https://nvd.nist.gov/vuln/detail/CVE-2026-89092 https://sourceware.org/bugzilla/show_bug.cgi?id=34624 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0016 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0016 https://www.cve.org/CVERecord?id=CVE-2026-89092
libcrypt1-2.44	CVE-2026-95818	MEDIUM	2.44-r6	2.44-r8	https://access.redhat.com/security/cve/CVE-2026-95818 https://nvd.nist.gov/vuln/detail/CVE-2026-95818 https://sourceware.org/bugzilla/show_bug.cgi?id=34360 https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0023 https://www.cve.org/CVERecord?id=CVE-2026-95818
libcurl-openssl4	CVE-2026-92392	HIGH	8.22.0-r3	8.23.0-r0	http://www.openwall.com/lists/oss-security/2026/10/18/5 http://www.openwall.com/lists/oss-security/2026/10/18/6 https://access.redhat.com/security/cve/CVE-2026-92392 https://curl.se/docs/CVE-2026-92392.html https://curl.se/docs/CVE-2026-92392.json https://hackerone.com/reports/4030333 https://nvd.nist.gov/vuln/detail/CVE-2026-92392 https://ubuntu.com/security/notices/USN-8927-1 https://ubuntu.com/security/notices/USN-8927-2 https://www.cve.org/CVERecord?id=CVE-2026-92392
perl	CVE-2026-82560	UNKNOWN	5.44.0-r1	5.44.0-r2	http://www.openwall.com/lists/oss-security/2026/09/19/6 https://github.com/rra/podlators/commit/70510174f69eb54aa6d617bde4e1402cd9b7c61f.patch https://metacpan.org/release/RRA/podlators-v6.1.0/source/lib/Pod/Text.pm#L245-261 https://metacpan.org/release/RRA/podlators-v6.1.1/changes
php-8.3	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-apache	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-apache	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-bcmath	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-bcmath	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-bcmath-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-bcmath-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ctype	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ctype	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ctype-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ctype-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-curl	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-curl	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-curl-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-curl-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-dom	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-dom	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-dom-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-dom-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-exif	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-exif	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-exif-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-exif-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-fileinfo	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-fileinfo	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-fileinfo-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-fileinfo-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ftp	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ftp	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ftp-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ftp-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gd	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gd	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gd-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gd-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gmp	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gmp	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gmp-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-gmp-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-iconv	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-iconv	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-iconv-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-iconv-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-intl	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-intl	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-intl-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-intl-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ldap	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ldap	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ldap-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-ldap-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mbstring	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mbstring	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mbstring-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mbstring-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mysqlnd	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mysqlnd	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mysqlnd-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-mysqlnd-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-opcache	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-opcache	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-opcache-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-opcache-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-openssl	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-openssl	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-openssl-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-openssl-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pcntl	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pcntl	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pcntl-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pcntl-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_mysql	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_mysql	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_mysql-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_mysql-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_pgsql	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_pgsql	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_pgsql-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_pgsql-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_sqlite	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_sqlite	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_sqlite-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-pdo_sqlite-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-phar	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-phar	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-phar-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-phar-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-posix	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-posix	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-posix-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-posix-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-simplexml	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-simplexml	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-simplexml-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-simplexml-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sodium	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sodium	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sodium-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sodium-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sysvsem	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sysvsem	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sysvsem-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-sysvsem-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xml	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xml	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xml-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xml-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlreader	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlreader	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlreader-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlreader-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlwriter	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlwriter	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlwriter-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-xmlwriter-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-zip	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-zip	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-zip-config	CVE-2026-109618	CRITICAL	8.3.35-r1	8.3.35-r4	http://seclists.org/fulldisclosure/2026/Oct/51 http://www.openwall.com/lists/oss-security/2026/10/21/6 http://www.openwall.com/lists/oss-security/2026/10/23/5 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109618 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w https://linux.oracle.com/cve/CVE-2026-109618.html https://linux.oracle.com/errata/ELSA-2026-87151.html https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://php2shell.delftintellab.com https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.wiz.io/blog/php2shell-php-rce
php-8.3-zip-config	CVE-2026-109619	HIGH	8.3.35-r1	8.3.35-r4	http://www.openwall.com/lists/oss-security/2026/10/21/16 http://www.openwall.com/lists/oss-security/2026/10/21/17 http://www.openwall.com/lists/oss-security/2026/10/21/23 http://www.openwall.com/lists/oss-security/2026/10/21/7 http://www.openwall.com/lists/oss-security/2026/10/22/14 http://www.openwall.com/lists/oss-security/2026/10/22/15 http://www.openwall.com/lists/oss-security/2026/10/22/16 http://www.openwall.com/lists/oss-security/2026/10/22/19 http://www.openwall.com/lists/oss-security/2026/10/22/2 http://www.openwall.com/lists/oss-security/2026/10/22/20 http://www.openwall.com/lists/oss-security/2026/10/23/4 https://access.redhat.com/errata/RHSA-2026:87071 https://access.redhat.com/security/cve/CVE-2026-109619 https://arcticwolf.com/resources/blog/php2shell-critical-php-vulnerabilities-enable-unauthenticated-remote-code-execution/ https://bugzilla.redhat.com/show_bug.cgi?id=2541646 https://bugzilla.redhat.com/show_bug.cgi?id=2553995 https://bugzilla.redhat.com/show_bug.cgi?id=2554177 https://cert-portal.siemens.com/productcert/html/ssa-166980.html https://cert-portal.siemens.com/productcert/html/ssa-566435.html https://cert-portal.siemens.com/productcert/html/ssa-566512.html https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109618 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-109619 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91765 https://errata.almalinux.org/9/ALSA-2026-A014.html https://errata.rockylinux.org/RLSA-2026:87071 https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp https://linux.oracle.com/cve/CVE-2026-109619.html https://linux.oracle.com/errata/ELSA-2026-88693.html https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://php2shell.delftintellab.com/ https://ubuntu.com/security/notices/USN-8948-1 https://ubuntu.com/security/notices/USN-8948-2 https://www.cisa.gov/known-exploited-vulnerabilities-catalog https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-109619 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://www.wiz.io/blog/php2shell-php-rce
No Misconfigurations found
node-pkg
No Vulnerabilities found
No Misconfigurations found
composer-vendor
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
guzzlehttp/guzzle	CVE-2026-69246	HIGH	7.8.2	7.15.2, 8.0.1	https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/3aeea0406aab88cbbd86531313d7cebf8ae149a4 https://github.com/guzzle/guzzle/commit/744101956d78b7c1384d0cbf379db13e859167bf https://github.com/guzzle/guzzle/pull/3907 https://github.com/guzzle/guzzle/pull/3908 https://github.com/guzzle/guzzle/releases/tag/7.15.2 https://github.com/guzzle/guzzle/releases/tag/8.0.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-v5mv-p594-2x33
guzzlehttp/guzzle	CVE-2026-55568	MEDIUM	7.8.2	7.12.1	https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/security/advisories/GHSA-wpwq-4j6v-78m3
guzzlehttp/guzzle	CVE-2026-55767	MEDIUM	7.8.2	7.12.1	https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle/CVE-2026-55767.yaml https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7f537cded1912349abf5081258d6db19106d774d https://github.com/guzzle/guzzle/pull/3653 https://github.com/guzzle/guzzle/releases/tag/7.12.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-cwxw-98qj-8qjx https://nvd.nist.gov/vuln/detail/CVE-2026-55767
guzzlehttp/guzzle	CVE-2026-59883	MEDIUM	7.8.2	7.12.3	https://access.redhat.com/security/cve/CVE-2026-59883 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/b9944c161b12d9ee9c9334cfc5b9659ecd7451f8 https://github.com/guzzle/guzzle/pull/3694 https://github.com/guzzle/guzzle/releases/tag/7.12.3 https://github.com/guzzle/guzzle/security/advisories/GHSA-g446-98w2-8p5w https://nvd.nist.gov/vuln/detail/CVE-2026-59883 https://www.cve.org/CVERecord?id=CVE-2026-59883
guzzlehttp/guzzle	CVE-2026-67339	MEDIUM	7.8.2	7.14.2	https://access.redhat.com/security/cve/CVE-2026-67339 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/9e4580d4b9981e903dc6323fe37f50a96e85b05e https://github.com/guzzle/guzzle/pull/3876 https://github.com/guzzle/guzzle/releases/tag/7.14.2 https://github.com/guzzle/guzzle/security/advisories/GHSA-94pj-82f3-465w https://nvd.nist.gov/vuln/detail/CVE-2026-67339 https://www.cve.org/CVERecord?id=CVE-2026-67339 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-proxy-authorization-header-disclosure
guzzlehttp/guzzle	CVE-2026-67353	MEDIUM	7.8.2	7.15.1	https://access.redhat.com/security/cve/CVE-2026-67353 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4 https://github.com/guzzle/guzzle/pull/3901 https://github.com/guzzle/guzzle/releases/tag/7.15.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-f283-ghqc-fg79 https://nvd.nist.gov/vuln/detail/CVE-2026-67353 https://www.cve.org/CVERecord?id=CVE-2026-67353 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-unbounded-cookie-denial-of-service
guzzlehttp/guzzle	CVE-2026-67354	MEDIUM	7.8.2	7.15.1	https://access.redhat.com/security/cve/CVE-2026-67354 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4 https://github.com/guzzle/guzzle/pull/3901 https://github.com/guzzle/guzzle/releases/tag/7.15.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-h95v-h523-3mw8 https://nvd.nist.gov/vuln/detail/CVE-2026-67354 https://www.cve.org/CVERecord?id=CVE-2026-67354 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-uri-fragment-disclosure-via-referer
guzzlehttp/guzzle	CVE-2026-67355	MEDIUM	7.8.2	7.15.1	https://access.redhat.com/security/cve/CVE-2026-67355 https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/7b68220d6543f6f80fe62e633361fc9d4ead14d4 https://github.com/guzzle/guzzle/pull/3901 https://github.com/guzzle/guzzle/releases/tag/7.15.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-wm3w-8rrp-j577 https://nvd.nist.gov/vuln/detail/CVE-2026-67355 https://www.cve.org/CVERecord?id=CVE-2026-67355 https://www.vulncheck.com/advisories/guzzlehttp-guzzle-before-host-only-cookie-scope
guzzlehttp/guzzle	CVE-2026-69245	MEDIUM	7.8.2	7.15.2, 8.0.1	https://github.com/guzzle/guzzle https://github.com/guzzle/guzzle/commit/3aeea0406aab88cbbd86531313d7cebf8ae149a4 https://github.com/guzzle/guzzle/commit/744101956d78b7c1384d0cbf379db13e859167bf https://github.com/guzzle/guzzle/pull/3907 https://github.com/guzzle/guzzle/pull/3908 https://github.com/guzzle/guzzle/releases/tag/7.15.2 https://github.com/guzzle/guzzle/releases/tag/8.0.1 https://github.com/guzzle/guzzle/security/advisories/GHSA-f7vp-7xgx-4w4r
guzzlehttp/psr7	CVE-2026-48998	MEDIUM	2.7.0	2.10.2	https://access.redhat.com/security/cve/CVE-2026-48998 https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2026-48998.yaml https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/security/advisories/GHSA-34xg-wgjx-8xph https://nvd.nist.gov/vuln/detail/CVE-2026-48998 https://www.cve.org/CVERecord?id=CVE-2026-48998
guzzlehttp/psr7	CVE-2026-49214	MEDIUM	2.7.0	2.10.2	https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/psr7/CVE-2026-49214.yaml https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/security/advisories/GHSA-hq7v-mx3g-29hw https://nvd.nist.gov/vuln/detail/CVE-2026-49214
guzzlehttp/psr7	CVE-2026-55766	MEDIUM	2.7.0	2.12.1	https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/security/advisories/GHSA-vm85-hxw5-5432
guzzlehttp/psr7	CVE-2026-59882	MEDIUM	2.7.0	2.12.3	https://github.com/guzzle/psr7 https://github.com/guzzle/psr7/commit/ddd64f17d4cc1f7e5ffe6fd2c989ec7221712580 https://github.com/guzzle/psr7/pull/811 https://github.com/guzzle/psr7/releases/tag/2.12.3 https://github.com/guzzle/psr7/security/advisories/GHSA-c2w2-prh8-qm98 https://nvd.nist.gov/vuln/detail/CVE-2026-59882
mtdowling/jmespath.php	CVE-2026-54133	CRITICAL	2.8.0	2.9.1	https://github.com/FriendsOfPHP/security-advisories/blob/master/mtdowling/jmespath.php/CVE-2026-54133.yaml https://github.com/jmespath/jmespath.php https://github.com/jmespath/jmespath.php/security/advisories/GHSA-pcw8-m77r-2528 https://nvd.nist.gov/vuln/detail/CVE-2026-54133
phpseclib/phpseclib	CVE-2026-44167	HIGH	2.0.53	1.0.29, 2.0.54, 3.0.52	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/commit/d53d2021bcb9f6a04d5d44ec99e6bbef219a71bc https://github.com/phpseclib/phpseclib/security/advisories/GHSA-3qpq-r242-jqj7 https://nvd.nist.gov/vuln/detail/CVE-2026-44167 https://ubuntu.com/security/notices/USN-8830-1 https://www.cve.org/CVERecord?id=CVE-2026-44167
phpseclib/phpseclib	CVE-2026-55599	MEDIUM	2.0.53	1.0.30, 2.0.55, 3.0.54	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/security/advisories/GHSA-m557-wrgg-6rp4 https://nvd.nist.gov/vuln/detail/CVE-2026-55599
phpseclib/phpseclib	CVE-2026-84308	MEDIUM	2.0.53	3.0.57, 4.0.1	https://github.com/phpseclib/phpseclib https://github.com/phpseclib/phpseclib/commit/fb56bc5bb9009b54a6c26b31aeec8ed944f17373 https://github.com/phpseclib/phpseclib/releases/tag/3.0.57 https://github.com/phpseclib/phpseclib/releases/tag/4.0.1 https://github.com/phpseclib/phpseclib/security/advisories/GHSA-q97c-8qh3-fpc6 https://nvd.nist.gov/vuln/detail/CVE-2026-84308
symfony/dom-crawler	CVE-2026-45071	HIGH	v6.4.4	5.2.0, 5.4.0, 6.2.0, 6.3.0, 6.4.40, 7.3.0, 7.4.0, 7.4.12, 8.0.12, 5.0.0, 6.1.0, 7.1.0, 3.0.0, 4.0.0, 5.1.0, 5.3.0, 5.4.52, 6.4.0, 7.2.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/dom-crawler/CVE-2026-45071.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45071.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/eea5fd7488cbdc241da4ce242344b7d9a3ecdf3d https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-x6g4-fwcc-jj8w https://symfony.com/cve-2026-45071
symfony/http-foundation	CVE-2026-108082	HIGH	v6.4.29	8.1.0, 8.1.7, 6.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.46, 7.1.0, 7.4.0, 7.4.19, 5.4.54, 7.2.0, 7.3.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2026-108082.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-108082.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/343a1772ce6ac03e48b228d2d7168d19750e3f36 https://github.com/symfony/symfony/commit/9ffa802e5d7e9fb8ba95eeefd27e863e83b1baca https://github.com/symfony/symfony/pull/66048 https://github.com/symfony/symfony/pull/66491 https://github.com/symfony/symfony/releases/tag/v5.4.54 https://github.com/symfony/symfony/releases/tag/v6.4.48 https://github.com/symfony/symfony/releases/tag/v7.4.21 https://github.com/symfony/symfony/releases/tag/v8.1.9 https://github.com/symfony/symfony/security/advisories/GHSA-r925-mgvr-h9cc https://nvd.nist.gov/vuln/detail/CVE-2026-108082 https://symfony.com/blog/cve-2026-108082-redos-in-headerutils-split-reachable-through-the-cache-control-request-header https://symfony.com/cve-2026-108082
symfony/http-foundation	CVE-2026-48736	HIGH	v6.4.29	7.4.13, 8.0.13, 6.4.41, 7.1.0, 7.2.0, 7.3.0, 7.4.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-client/CVE-2026-48736.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2026-48736.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-48736.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/82765368cf74177c36613575182f168a2eb765b2 https://github.com/symfony/symfony/commit/85b831555be8ea1f43bf01078afe87bc4c92f65e https://github.com/symfony/symfony/releases/tag/v5.4.53 https://github.com/symfony/symfony/releases/tag/v6.4.41 https://github.com/symfony/symfony/releases/tag/v7.4.13 https://github.com/symfony/symfony/security/advisories/GHSA-38cx-cq6f-5755 https://symfony.com/cve-2026-48736
symfony/mailer	CVE-2026-45068	HIGH	v6.4.18	5.0.0, 5.4.52, 6.2.0, 7.3.0, 7.4.0, 7.4.12, 5.2.0, 6.3.0, 6.4.0, 6.4.40, 8.0.12, 3.0.0, 4.0.0, 5.4.0, 6.1.0, 7.2.0, 5.1.0, 5.3.0, 7.1.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mailer/CVE-2026-45068.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45068.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/c45144862dc289d03952f41f6078174089a3afc6 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-xx3c-qf5g-hc39 https://symfony.com/cve-2026-45068
symfony/mime	CVE-2026-45067	HIGH	v6.4.18	5.0.0, 6.3.0, 7.3.0, 7.4.0, 5.1.0, 5.4.0, 5.4.52, 6.1.0, 6.2.0, 6.4.40, 7.2.0, 5.2.0, 5.3.0, 6.4.0, 7.1.0, 8.0.12, 3.0.0, 4.0.0, 7.4.12	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45067.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45067.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/a1c42cbe517bc146a54da7505a107ded317478fe https://github.com/symfony/symfony/commit/dc2dbd29211eb4ddc451373fa1374fb926e94604 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-qpmx-3rfj-7rhv https://symfony.com/cve-2026-45067
symfony/mime	CVE-2026-45070	MEDIUM	v6.4.18	7.4.0, 7.4.22, 4.0.0, 5.2.0, 5.3.0, 7.1.0, 7.3.0, 3.0.0, 6.1.0, 5.4.0, 5.4.55, 7.2.0, 8.1.0, 8.1.10, 5.0.0, 5.1.0, 6.2.0, 6.3.0, 6.4.0, 6.4.49	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/mime/CVE-2026-45070.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45070.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/e62ea217f8b4ca8ae922ad0f949e0c4dc1f9b613 https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-vqc8-7275-q272 https://symfony.com/cve-2026-45070
symfony/polyfill-intl-idn	CVE-2026-46644	LOW	v1.31.0	1.38.1	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill-intl-idn/CVE-2026-46644.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/polyfill/CVE-2026-46644.yaml https://github.com/symfony/polyfill https://github.com/symfony/polyfill/commit/1be936e2491ccebe152bd736dfc91eb1422c8bec https://github.com/symfony/polyfill/releases/tag/v1.38.1 https://github.com/symfony/polyfill/security/advisories/GHSA-2xf4-cg6j-vhgq https://symfony.com/cve-2026-46644
symfony/routing	CVE-2026-45065	MEDIUM	v6.4.18	6.4.0, 5.1.0, 5.4.52, 7.1.0, 7.3.0, 8.0.12, 3.0.0, 4.0.0, 5.0.0, 5.2.0, 5.4.0, 6.1.0, 6.3.0, 6.4.40, 5.3.0, 6.2.0, 7.2.0, 7.4.0, 7.4.12	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2026-45065.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-45065.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/bcf487c22f3240ba994124e0e0fe8616f3cfc47a https://github.com/symfony/symfony/releases/tag/v5.4.52 https://github.com/symfony/symfony/releases/tag/v6.4.40 https://github.com/symfony/symfony/releases/tag/v7.4.12 https://github.com/symfony/symfony/releases/tag/v8.0.12 https://github.com/symfony/symfony/security/advisories/GHSA-72xp-p242-47p9 https://symfony.com/cve-2026-45065
symfony/routing	CVE-2026-48784	MEDIUM	v6.4.18	3.0.0, 5.0.0, 5.4.0, 5.4.53, 4.0.0, 5.2.0, 6.1.0, 6.3.0, 6.4.0, 6.4.41, 7.1.0, 7.2.0, 5.1.0, 5.3.0, 6.2.0, 7.3.0, 7.4.13, 8.0.13, 7.4.0	https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/routing/CVE-2026-48784.yaml https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2026-48784.yaml https://github.com/symfony/symfony https://github.com/symfony/symfony/commit/4b63c3a3f7af04ecd79c89a594b0b02a01990b1d https://github.com/symfony/symfony/releases/tag/v5.4.53 https://github.com/symfony/symfony/releases/tag/v6.4.41 https://github.com/symfony/symfony/releases/tag/v7.4.13 https://github.com/symfony/symfony/security/advisories/GHSA-h5x3-xfc9-m39h https://symfony.com/cve-2026-48784
web-auth/webauthn-lib	GHSA-gq4g-fpc9-vjfq	LOW	4.9.1	5.3.5	https://github.com/web-auth/webauthn-framework https://github.com/web-auth/webauthn-framework/security/advisories/GHSA-gq4g-fpc9-vjfq
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
league/flysystem	CVE-2026-102601	LOW	2.5.0	3.35.3	https://github.com/thephpleague/flysystem https://github.com/thephpleague/flysystem/commit/ef4a9a557d769b5d472c403125716706a0d9cc77 https://github.com/thephpleague/flysystem/releases/tag/3.35.3 https://github.com/thephpleague/flysystem/security/advisories/GHSA-cxf4-7mrp-vvpr https://nvd.nist.gov/vuln/detail/CVE-2026-102601
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found
composer-vendor
No Vulnerabilities found
No Misconfigurations found