PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
2026-10-23T20:51:36Z•cb26ebe93a25fb1fc4df35cda8f798632b89b5f9ac07fce3b98e1478647b9b27
CVE-2026-109618CVE-2026-109619CVE-2026-113380CVE-2026-115560AI-enabled attacksChina-linked threat actorConnectWiseMicrosoft 365PHPPHP2ShellSafePaySignalStorm-0940active exploitationcredential theftcritical infrastructurecybercrimelaw enforcementprivacyransomwareremote code executionspace securitysupply chain compromisevulnerability disclosure
What happened
Security news digest covering newly disclosed vulnerabilities and active exploitation, including critical PHP code-execution flaws (CVE-2026-115560, CVE-2026-109618, CVE-2026-109619), a critical Signal calling flaw (CVE-2026-113380), China-linked exploitation of ConnectWise credentials, SafePay ransomware activity, and major cybercrime enforcement operations. Organizations should prioritize PHP and Signal updates, review session-upload configurations, investigate ConnectWise and Microsoft 365 access, and apply ransomware defenses.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- cb26ebe93a25fb1fc4df35cda8f798632b89b5f9ac07fce3b98e1478647b9b27
- Enrichment time
- 2026-10-23T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.