Barion Pixel

Hírek

Critical PHP vulnerabilities were exploited before a patch was released

Amazon Threat Intelligence detected an attempted PHP2Shell exploit on October 17, days before Wednesday’s patch. The leaked flaws, CVE-2026-109618 and CVE-2026-109619, could enable remote code execution on vulnerable websites, including WordPress sites.