#php-exploits-requiring-immediate-upgrade

admin
admin 🇺🇸 • 💻Technology
@admin

Link Share PSA: Critical Vulnerability Found with PHP

www.facebook.com
16K views · 3.3K reactions | The NSA says patch PHP now or take your systems offline. Here is why. A bug hiding in PHP for over ten years, turned into a full server takeover in about a week with Al. Patch is out. If your site runs PHP, update the runtime itself, not just WordPress. CVE-2026-109618/109612 Part 1 #cybersecurity #infosec #webdev #php #hacking | Cybermisplays
The NSA says patch PHP now or take your systems offline. Here is why. A bug hiding in PHP for over ten years, turned into a full server takeover in about a week with Al. Patch is out. If your site...

For developers - just to be aware. theunderKurrent does not run via PHP.

PHP2Shell - discovered by LCFR (@lcfr_hax on X.com)

The vulnerabilities consist of:

  • CVE-2026-109618: corrupt process memory and execute arbitrary code
    Affected: upload progress, remote process memory disclosure
  • CVE-2026-109618: corrupt process memory and execute arbitrary code, corrupt a PHP state and execute code
    Affected: fatal-error backtrace use-after-free, OPcache type confusion

How it was demonstrated: pre-authentication Remote Code Execution (RCE) with major CMSs, such as: Drupal, Wordpress, and Joomla, etc.

Since th…

1
0 2