Vulnerabilities and CVEs news, page 57 | Cyber Security News

Thu 22 Oct 202620 entries

08:34 Exploited

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

The Hacker News

Someone Tried to Exploit PHP2Shell 4 Days Before the Vulnerabilities Were Publicly Disclosed

07:00 Vulnerability

ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-787: NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

06:00 Vulnerability

How Much Does the Harness Matter, and for Whom? A Multi-Model Study of Context in LLM-Driven Vulnerability Discovery

arXiv cs.CR

06:00 Vulnerability

Cryptanalysis and Repair of "Decentralized Multi-authority ABE for NC$^1$ from BDH"

arXiv cs.CR

06:00 Vulnerability

Where AI Vulnerability Discovery Harnesses Go Quiet: Structural False Negatives and Hidden Vulnerabilities

arXiv cs.CR

04:24 Patch

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Wired

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

02:51 Patch

Why It’s Urgent to Update PHP on Your WordPress Site: Two Critical PHP Vulnerabilities and What Our Testing Found

CVE-2026-109618CVE-2026-109619Wordfence

Why It’s Urgent to Update PHP on Your WordPress Site: Two Critical PHP Vulnerabilities and What Our Testing Found

02:44 Vulnerability

🏴☠️ Lamashtu has just published a new victim : VERGI Muenster

ransomware.live

🏴☠️ Lamashtu has just published a new victim : VERGI Muenster

02:00 Vulnerability

[remote] PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

CVE-2026-109618Exploit-DB

02:00 Patch

SVD-2026-1013: Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026

CVE-2026-109618CVE-2026-109619Splunk

02:00 Vulnerability

Behind Japan’s Warnings of a Cyber Crisis

Recorded Future

Behind Japan’s Warnings of a Cyber Crisis

01:12 Vulnerability

Smashing Security podcast #489: How a brand new crypto wallet came with a spy inside

Graham Cluley

00:21 Patch

CVE-2026-109618 and CVE-2026-109619: PHP Vulnerable to Unauthenticated RCE Attacks

CVE-2026-109618CVE-2026-109619Zscaler ThreatLabz

CVE-2026-109618 and CVE-2026-109619: PHP Vulnerable to Unauthenticated RCE Attacks

00:00 Patch

DSA-6534-3 webkit2gtk - regression update

Debian Security

00:00 Patch

DSA-6577-1 chromium - security update

Debian Security

00:00 Patch

DSA-6578-1 aide - security update

Debian Security