Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)
2026-10-29T20:51:33Z•8f0f28e59026d5767a2ca31c9d1a5aea79de2cf5a147392e7b1f51184f841479
CVE-2024-47575CVE-2026-0257CVE-2026-109618CVE-2026-109619CVE-2026-88771CVE-2026-88772AI-assisted-cybercrimeAI-espionageFortiGateFortiManagerLinuxNetScalerOAuthPAN-OSPEERSTITCHPHPTLSactive-exploitationcertificate-authority-compromisecloud-securitycredential-theftinitial-accessman-in-the-middlephishingransomwaresoftware-supply-chain-security`,`Kubernetes`,`RBAC`,`critical-invulnerability-managementweb-shellszero-day
What happened
Unit 42 RSS feed highlighting active and emerging cybersecurity threats, including critical PHP vulnerabilities, exploited PAN-OS and NetScaler flaws, FortiGate compromise and PEERSTITCH malware, compromised eMudhra certificate authority keys, OAuth attacks, AI-assisted cybercrime and espionage, ransomware, phishing, cloud and software supply-chain attacks, and Kubernetes RBAC risks. The most urgent items involve vulnerabilities reportedly exploited in the wild and compromises affecting internet-facing security infrastructure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- paloalto_unit42
- Record identifier
- 8f0f28e59026d5767a2ca31c9d1a5aea79de2cf5a147392e7b1f51184f841479
- Enrichment time
- 2026-10-29T20:51:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.