importantSYS.SOURCE: The Hacker News• 2026-10-27T10:07:59+05:30

CISA Adds PHP2Shell Vulnerabilities to KEV Catalog Due to Active Exploitation

#vulnerability #remote-code-execution #cisa

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two high-severity PHP2Shell vulnerabilities, CVE-2026-109618 and another, to its Known Exploited Vulnerabilities (KEV) catalog due to active exploitation. These flaws, rated 9.2 on the CVSS scale, allow unauthenticated remote code execution on affected systems.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog.

The PHP vulnerabilities, both rated 9.2 on the CVSS scoring system, facilitate unauthenticated remote code execution on affected deployments -

CVE-2026-109618 - An out-of-memory

Read original article

*** END OF TRANSMISSION ***

> AUSTRALIAN SIGNALS DIRECTORATE DISABLES AMADEY MALWARE BACKEND, DISCONNECTING 180,000 INFECTED DEVICES > OPENAI COMPACTION FEATURE EXPLOIT ENABLES EXTRACTION OF ENCRYPTED REASONING DATA > UNAUTHORIZED REMOTE ACCESS EXPLOITS P2P AND AUTHENTICATION FLAWS IN DAHUA IP CAMERAS ACROSS UKRAINE > X INTRODUCES POINTING HAND NUDGE FOR POST PROMOTION, SPARKS USER CONFUSION > UK INTRODUCES £925 ANNUAL LEVY ON UNIVERSITIES FOR INTERNATIONAL STUDENTS > ALLMODELS.IO LAUNCHES ABLITERATED MODEL ROUTER WITH 5 DEEPSEEK INFERENCE PROVIDERS > CISA ADDS PHP2SHELL VULNERABILITIES TO KEV CATALOG DUE TO ACTIVE EXPLOITATION > TEACHING OPENGL ES 3.0 IN MODERN GRAPHICS EDUCATION > OPENAI'S DOTS: TRANSFORMING CODING TOOLS INTO AN ALWAYS-ON PERSONAL ASSISTANT > PORTING 16-BIT WINDOWS EMULATION TO 64-BIT WINDOWS WITH WINEVDM> AUSTRALIAN SIGNALS DIRECTORATE DISABLES AMADEY MALWARE BACKEND, DISCONNECTING 180,000 INFECTED DEVICES > OPENAI COMPACTION FEATURE EXPLOIT ENABLES EXTRACTION OF ENCRYPTED REASONING DATA > UNAUTHORIZED REMOTE ACCESS EXPLOITS P2P AND AUTHENTICATION FLAWS IN DAHUA IP CAMERAS ACROSS UKRAINE > X INTRODUCES POINTING HAND NUDGE FOR POST PROMOTION, SPARKS USER CONFUSION > UK INTRODUCES £925 ANNUAL LEVY ON UNIVERSITIES FOR INTERNATIONAL STUDENTS > ALLMODELS.IO LAUNCHES ABLITERATED MODEL ROUTER WITH 5 DEEPSEEK INFERENCE PROVIDERS > CISA ADDS PHP2SHELL VULNERABILITIES TO KEV CATALOG DUE TO ACTIVE EXPLOITATION > TEACHING OPENGL ES 3.0 IN MODERN GRAPHICS EDUCATION > OPENAI'S DOTS: TRANSFORMING CODING TOOLS INTO AN ALWAYS-ON PERSONAL ASSISTANT > PORTING 16-BIT WINDOWS EMULATION TO 64-BIT WINDOWS WITH WINEVDM