MEDIUMVulnerability
Global

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

·Source: The Hacker News

Updated:

Executive Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments - CVE-2026-109618 - An out-of-memory

Analysis

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments - CVE-2026-109618 - An out-of-memory

Indicators of Compromise (1)

CVE (1)
CVE-2026-109618
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 27, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Brockton Neighborhood Health Center to Pay Up to $850,000 to Settle Breach Lawsuit

Massachusetts-based Brockton Neighborhood Health Center has agreed to pay up to $825,000 to settle class action litigation over a 2024 […] The post Brockton Neighborhood Health Center to Pay Up to $850,000 to Settle Breach Lawsuit appeared first on The HIPAA Journal .

HIPAA Journal
MEDIUMVulnerabilityNEW

Simplify User Access Management with SCIM on Rapid7 Command Platform

Managing access to security tools shouldn't require another manual process. As organizations grow, keeping user accounts and permissions up to date becomes increasingly complex. Employees join, change roles, and leave, creating a constant need to update access across applications. When these processes rely on manual administration, delays and oversights can introduce unnecessary work and security

Rapid7
MEDIUMVulnerability

Diebold Nixdorf and Euronet Worldwide form global ATM partnership

Diebold Nixdorf (NYSE: DBD), a global leader in transforming the way people bank and shop, and Euronet Worldwide, Inc. (NASDAQ: EEFT), a global payments infrastructure company and leader in payments processing and cross-border transactions, today announced their intent to form a global strategic collaboration to develop and deliver integrated ATM outsourcing solutions to financial institutions.

Finextra