PHP Vulnerability Wrap-Up, (Fri, Oct 23rd)
2026-10-23T19:23:42Z•650557bb203da0189e36616d517ddd174f6eca1964e4d8f8ac006286775d39bd
CVE-2026-109618CVE-2026-109619AI securityDWGPHPPanchanSANS ISCVBAYARAcritical vulnerabilitycryptocurrency miningearly exploitationpatch managementproof-of-concept exploitremote code execution
What happened
SANS ISC reported a critical PHP vulnerability affecting widely deployed PHP installations. The issue was rated CVSS 9.4, with early proof-of-concept exploits available before the vendor patch, prompting an elevated alert level. The wrap-up indicates the situation later returned to normal after patch availability. Related entries also mention malicious VBA projects embedded in DWG files, AI agent security, and Panchan cryptocurrency-mining activity, but provide insufficient detail for additional vulnerability attribution.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 650557bb203da0189e36616d517ddd174f6eca1964e4d8f8ac006286775d39bd
- Enrichment time
- 2026-10-23T19:23:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.