1. Executive summary Two critical PHP engine flaws, CVE-2026-109618 and CVE-2026-109619, both scored CVSS 9.2 and both unauthenticated remote code execution,
1. Executive summary HPE Aruba published two security bulletins on 22 October 2026 covering multiple vulnerabilities in ArubaOS (AOS) and ClearPass Policy Manager (CPPM), and CERT-
1. Executive summary PHP2Shell covers two critical PHP engine flaws, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2 and both allowing unauthenticated
1. Executive summary Two critical remote code execution flaws in the PHP core, CVE-2026-109618 and CVE-2026-109619, were patched on 21 October 2026
1. Executive summary Two critical remote code execution flaws in PHP core, CVE-2026-109618 and CVE-2026-109619, were patched on 2026-10-21 in
1. Executive summary Two critical remote code execution vulnerabilities in PHP core, CVE-2026-109618 and CVE-2026-109619, were leaked ahead of a coordinated disclosure