PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
2026-10-23T13:24:01Z•a008d57ad85a55ff963d8b6b1956a0873511a1ca2dbd1090a0eb2adf921dcd0e
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-112900CVE-2026-115560AI-agentsAI-securityConnectWiseGitLabHTTP/3Linux-KSMBDLiteLLMMCPMiraiNode.jsPHPPillowQPACKSandwormUkraineactive-exploitationcertificate-authoritycredential-theftcybercrimedestructive-attackremote-code-executionsupply-chain-attackvulnerabilityzero-day
What happened
The feed reports multiple critical cybersecurity developments, including actively exploited and unpatched remote-code-execution vulnerabilities in PHP, Node.js, Pillow, GitLab, and Linux KSMBD; supply-chain compromises affecting LiteLLM and ConnectWise; destructive state-sponsored activity against Ukraine; AI-agent and MCP security risks; credential and certificate compromises; and denial-of-service flaws in HTTP/3. Several issues have public proof-of-concept code or exploitation attempts, creating urgent patching, credential-rotation, and incident-response priorities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- a008d57ad85a55ff963d8b6b1956a0873511a1ca2dbd1090a0eb2adf921dcd0e
- Enrichment time
- 2026-10-23T13:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.