Stay Informed

Cybersecurity News

Home / News

Clear

Quick searches: Linux Windows Microsoft 365 AWS OVH VMware WordPress Fortinet Citrix VPN

613 result(s) for "PHP" — best match first.

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

WordPress — CVE-2026-119977
Vulnerability High

WordPress: a flaw in the core upgrade process is exploited to run code on servers, CISA warns

CISA added CVE-2026-119977, a race condition in WordPress core upgrades that lets an unauthenticated attacker run code on the server during the upgrade window, to its catalog of a…

WordPressPHPApache

November 4, 2026 Read more →
PHP — CVE-2026-109618 · CVE-2026-109619
Vulnerability High

PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution on web servers

On 21 October 2026, the PHP project shipped emergency releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix CVE-2026-109618 and CVE-2026-109619, two memory flaws that let an unauthent…

PHPApacheNginx

October 22, 2026 Read more →
BeyondTrust — CVE-2026-102764
Vulnerability Critical

BeyondTrust Remote Support: a zero-day exploited since August lets attackers take over the appliance without an account

BeyondTrust has fixed CVE-2026-102764, a critical flaw in Remote Support that lets an attacker with no account perform file operations on the appliance. According to Google and Ma…

BeyondTrustRemote accessLinux

October 17, 2026 Read more →
Nextcloud · Collabora CODE — CVE-2026-110447
Vulnerability Critical

Nextcloud: attackers plant web shells through Collabora’s Built-in CODE Server app, update or remove it now

A critical flaw in the optional Nextcloud app Collabora Online - Built-in CODE Server lets anyone run system commands on the server without logging in. It has been exploited since…

NextcloudLinuxPHP

October 15, 2026 Read more →
Integrity Tech · AA26-281A — 8 CVE
Threat High

FBI and nine partner agencies expose the toolkit of China-linked Integrity Tech: old flaws, Exchange password spraying and SoftEther VPN backdoors

On 8 October 2026 the FBI, CISA, NSA and agencies from six other countries published a joint advisory on the hackers enabled by Integrity Technology Group, a Chinese company linke…

ExchangeMicrosoft 365Linux

October 9, 2026 Read more →
Citrix NetScaler — CVE-2026-88771 · 88772 · 88779
Vulnerability Critical

Citrix NetScaler: two critical zero-days under mass exploitation — patch, then check for compromise

Two pre-authentication flaws in NetScaler ADC and Gateway (CVE-2026-88771 and CVE-2026-88772, CVSS 9.5) were exploited before any fix existed and are now used by many attacker gro…

CitrixVPN

October 4, 2026 Read more →
Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

SUSE PHP 7 Update Addresses 12 Security Issues and Improves Security

An update that solves 12 vulnerabilities can now be installed.

Linux PHP

14 days ago · Oct 22, 2026, 6:30 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

openSUSE PHP 7 Update Addresses 12 Security Issues and Vulnerabilities

An update that solves 12 vulnerabilities can now be installed.

Linux PHP

14 days ago · Oct 22, 2026, 6:30 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

Oracle Linux 10 PHP 8.4 Receives an Important Security Update

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

Linux PHP

14 days ago · Oct 22, 2026, 4:22 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

PHP 8.3.36 Update for Oracle Linux 10 - Installation Guide

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

Linux PHP

14 days ago · Oct 22, 2026, 4:22 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

Oracle Linux 9 PHP Update Fixes Multiple Security Issues

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Linux PHP

14 days ago · Oct 22, 2026, 4:22 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

Oracle Linux 8 PHP 7.4 Important Security Fixes and Updates

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Linux PHP

14 days ago · Oct 22, 2026, 4:22 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Mageia 10 PHP 8.4 and 8.5 Remote Code Execution Vulnerability Fixes

Security update

PHP

14 days ago · Oct 22, 2026, 6:26 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

Rocky Linux 10 PHP 8.4 Fixes DoS and Memory Safety Issues

Important: php8.4 security update

Linux PHP

14 days ago · Oct 22, 2026, 6:08 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora PHP Update Fixes OOM and Stale State RCE Vulnerabilities

Security update: - RCE via OOM corruption, CVE-2026-109618 - RCE via stale global state, CVE-2026-109619

Linux PHP

15 days ago · Oct 21, 2026, 6:45 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

AlmaLinux PHP 8.4 Fixes DoS and Memory Safety Vulnerabilities

php8.4 security update

Linux PHP

15 days ago · Oct 21, 2026, 6:00 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories

Fedora 43 php-getid3 1.9.27 XXE Embedded Corruption Notice 2026-b9ef1180ce

Version 1.9.27: [2026-09-22] GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length GHSA-j649-xr34-mmmh remove LIBXML_NOENT embedded picture in WMA files is co…

Linux PHP

26 days ago · Oct 10, 2026, 3:28 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Alerts

Fedora 44 php-getid3 1.9.27 XXE Issue Advisory 2026-71df118e18

Version 1.9.27: [2026-09-22] GHSA-c2xw-vp6w-gpph compressed ID3v2 frames max length GHSA-j649-xr34-mmmh remove LIBXML_NOENT embedded picture in WMA files is co…

Linux PHP

26 days ago · Oct 10, 2026, 3:09 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Alerts

Mageia 10 PHP 8.5 Bugfix Advisory Updated for 2026-0145 Release

Security update

PHP

34 days ago · Oct 2, 2026, 5:51 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

SUSE php-composer2 Moderate Path Traversal Threat Vuln 2026-23943-1

An update that solves three vulnerabilities can now be installed.

Linux PHP

35 days ago · Oct 1, 2026, 10:46 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Mageia Issues Urgent Advisory 2026-0458 Due to Critical PHP Vulnerabilities

Security update

PHP

38 days ago · Sep 28, 2026, 7:04 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

openSUSE php-composer2 Moderate Path Traversal Flaw Fix 2026-4288-1

An update that solves three vulnerabilities can now be installed.

Linux PHP

43 days ago · Sep 23, 2026, 2:30 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

SUSE php-composer2 Moderate Path Traversal Issues Fix 2026-4288-1

An update that solves three vulnerabilities can now be installed.

Linux PHP

43 days ago · Sep 23, 2026, 2:30 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

openSUSE php-composer2 Vulnerability - Critical Path Traversal 2026-4283-1

An update that solves six vulnerabilities and has one security fix can now be installed.

Linux PHP

44 days ago · Sep 22, 2026, 10:38 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Breaches & leaks

SUSE php-composer2 Critical Credential Leak and Code Exec Patch 2026-4283-1

An update that solves six vulnerabilities and has one security fix can now be installed.

Linux PHP

44 days ago · Sep 22, 2026, 10:38 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 php-pecl-mongodb2 Important Out-of-Bounds Read Fix CVE-2026-84968

Version 2.1.9 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968

Linux PHP Databases

49 days ago · Sep 17, 2026, 3:06 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 44 php-pecl-mongodb2 Important Out-Of-Bounds Read CVE-2026-84968

Version 2.1.9 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968

Linux PHP Databases

49 days ago · Sep 17, 2026, 2:52 AM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Fedora 45 php-pecl-mongodb2 Important Out-of-Bounds Read Fix CVE-2026-84968

Version 2.5.2 PHPC-2744 Fix out-of-bounds read when building BSON field path by @paulinevos & @GromNaN in #2081 CVE-2026-84968 Version 2.5.0 Honor the server-s…

Linux PHP Databases

53 days ago · Sep 13, 2026, 2:17 AM Read more →
The Hacker News
The Hacker News Vulnerabilities

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to ach…

WordPress PHP

80 days ago · Aug 17, 2026, 8:22 PM Read more →
LinuxSecurity - Security Advisories
LinuxSecurity - Security Advisories Vulnerabilities

Oracle 8 PHP Low Memory Corruption Vuln ELSA-2026-47750

Oracle Linux 8 has received security updates, including fixes for CVE-2026-14355 related to memory corruption in OpenSSL, along with various package updates an…

Linux PHP OpenSSL

93 days ago · Aug 4, 2026, 6:52 PM Read more →
Back to Home