YARA-X 1.22.0 Release, (Sun, Oct 25th)
2026-10-26T01:23:41Z•553810b23cfd19415e7bcefdf2b9087efcf774a5f4df06fd4d1418ef82fa675d
CVE-2026-109618CVE-2026-109619DWG filesPHPSANS ISCVBAYARA ruleYARA-Xexploit activityphp2shellproof of conceptremote code executionvulnerability alert
What happened
SANS Internet Storm Center entries covering the YARA-X 1.22.0 release, the 2026 PHP “php2shell” vulnerability and exploit activity, related threat updates, Stormcast episodes, and a YARA rule for detecting orphaned VBA projects embedded in DWG files. The PHP vulnerability received heightened alert status due to its critical severity (CVSS 9.4), widespread PHP deployment, and early proof-of-concept exploits.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 553810b23cfd19415e7bcefdf2b9087efcf774a5f4df06fd4d1418ef82fa675d
- Enrichment time
- 2026-10-26T01:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.