24h | 7d | 30d

CVE-2026-98432

Overview

  • Linux
  • Linux
15 Oct 2026
Published
31 Oct 2026
Updated
CVSS v3.1
CRITICAL (9.8)
EPSS
0.46%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt with a plain kfree(), leading to a use-after-free in ip_options_build(). A similar issue exists with request socket migration (net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program). reqsk_timer_handler() clones the request socket with inet_reqsk_clone(), so that the old request socket and its clone share the same ireq_opt, then reqsk_migrate_reset() clears the pointer in the old one. Another cpu holding a reference on the old request socket can still be using these options (sending a SYNACK, or creating a child in tcp_v4_syn_recv_sock()) when the clone is freed, and tcp_v4_reqsk_destructor() also uses a plain kfree(). Readers already use RCU, and other paths replacing inet_opt (do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and tcp_v4_reqsk_destructor() as well. IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock() duplicates the options. tcp_v6_reqsk_destructor() has the same migration issue with ipv6_opt, which is only set by CALIPSO. This will be addressed in a separate patch.

Statistics

  • 31 Posts
  • 55 Interactions
Last activity: Last hour

Fediverse

Profile picture fallback
RobCampbell @RobCampbell

Here’s some Linux irony: Debian, known for its conservative release cycle, has already patched CVE-2026-98432 for Debian 12 and 13. Ubuntu was still working on fixes as of Oct. 30.

Anthropic demonstrated a remote-root exploit under specific conditions.

Stable releases and fast security fixes aren’t opposites. Check your vendor’s advisory before assuming you’re protected.

security-tracker.debian.org/tr

#Linux #Debian #Ubuntu #OpenSource #Cybersecurity

  • 11
  • 5
  • 0
  • 14h ago
Profile picture fallback
La Contre-Voie @lacontrevoie

On ne vous en informe généralement pas ici, mais sachez que nous surveillons tous les jours s’il y a de nouvelles failles de sécurité sur chacun des logiciels que nous hébergeons, et appliquons systématiquement les correctifs nécessaires.

Tous nos serveurs sont déjà protégés contre les dernières failles sur Linux (CVE-2026-98432 9.8), Redis, Grafana, Nextcloud ou encore WordPress. PHP ne fait pas exception.

#sysadmin

1/2

  • 4
  • 6
  • 0
  • 6h ago
Profile picture fallback
:PUA: Shlee is a nervious bean & @shlee

ubuntu.com/security/CVE-2026-9

Ubuntu still haven’t released this fix? It’s been days since Debian released the new kernel? Wtf is going on Shuttleworth

  • 2
  • 5
  • 0
  • 2h ago
Profile picture fallback
poga 🐈 @poga

這年頭架服務真是有夠苦

blog.gslin.org/archives/2026/1

  • 1
  • 10
  • 0
  • 4h ago
Profile picture fallback
Mr.Nuclear Monster @MrNuclearMonster

ioquake3.org will be offline for a bit. Ubuntu hasn’t patched this yet atlasum.net/blog/cve-2026-9843

This includes all services (irc relay, directory server) as this looks severe and I don’t have time right now to look into it more.

  • 2
  • 0
  • 0
  • 3h ago
Profile picture fallback
Kyle Reddoch (CybersecKyle) @cyberseckyle

Linux CVE-2026-98432 is a TCP use-after-free. Anthropic demonstrated remote root against an MPTCP listener in a lab, not known in-the-wild exploitation. The underlying flaw is not limited to MPTCP.

Go 1.24+ enables MPTCP on Linux listeners by default. Inventory exposed services, check distro advisories and deploy fixed kernels.

anthropic.com/research/discove

  • 1
  • 1
  • 0
  • 18h ago
Profile picture fallback
Eckes :mastodon: @eckes

Did Canonical meanwhile communicate why their kernel fixes are still missing? ubuntu.com/security/CVE-2026-9

  • 1
  • 1
  • 0
  • 6h ago
Profile picture fallback
Joachim "T-Rex" Weber [friendica] 🦖 🦔 🐲 @trex
Eine schwerwiegende als CVE-2026-98432 katalogisierte Sicherheitslücke im Linux-Kernel ist teilweise noch nicht gepatcht. Die Anthropic-KI Claude hat einen funktionierenden Exploit entwickelt.
Kritische Linux-Lücke: KI-Modell Claude entwickelt Root-Exploit
  • 1
  • 0
  • 0
  • 19h ago
Profile picture fallback
benzogaga33 :verified: @benzogaga33

CVE-2026-98432: Linux IPv4 UAF nvd.nist.gov/vuln/detail/cve-2

  • 0
  • 1
  • 0
  • 22h ago
Profile picture fallback
Nellen :minato_sleep: :jack: @Nellen

je f5 comme si j'attendais un colis ubuntu.com/security/CVE-2026-9

  • 0
  • 0
  • 0
  • 15h ago
Profile picture fallback
@ConstellationUnion

CVE-2026-98432

so the cat's away?
that's why its so quiet out there?

  • 0
  • 0
  • 0
  • 8h ago
Profile picture fallback
Gea-Suan Lin @gslin

blog.gslin.org/archives/2026/1

Linux 這次 MPTCP 的 Use-after-free 漏洞 (CVE-2026-98432)

#advisory #kernel #linux #mitigation #mptcp #multipath #network #patch #security #sysctl #tcp #ubuntu #UseAfterFree #vulnerability

  • 0
  • 0
  • 0
  • 6h ago
Profile picture fallback
benzogaga33 :verified: @benzogaga33

CVE-2026-98432: blocking the Linux TCP bug until Ubuntu and Red Hat ship a fix getrff.com/blog/cve-2026-98432

  • 0
  • 0
  • 0
  • 3h ago

Bluesky

Profile picture fallback
Hacker News Top Stories @hackernewsbot.bsky.social
TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 | Discussion
  • 0
  • 1
  • 1
  • 13h ago
Profile picture fallback
Blockchain Report @blockchainreport.bsky.social
Cardano Foundation warns of critical Linux kernel vulnerability (CVE-2026-98432), CVSS 9.8. Affects IPv4 TCP handling, risks remote code execution. Node operators urged to patch immediately from distro updates. Ubuntu patches reportedly in prep. #crypto #blockchain #news
  • 0
  • 1
  • 0
  • 9h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue https://aws.amazon.com/security/security-bulletins/2026-160-aws/
  • 0
  • 1
  • 0
  • 8h ago
Profile picture fallback
Tech Trending @tech-trending.bsky.social
RHSB-2026-016 Use-after-free - kernel IPv4 (CVE-2026-98432) | Red Hat Customer Portal https://access.redhat.com/security/vulnerabilities/RHSB-2026-016
  • 0
  • 0
  • 0
  • 21h ago
Profile picture fallback
Eyal Estrin ☁️ @eyalestrin.bsky.social
Anthropic AI model finds Linux kernel bug that leads to remote root access (CVE-2026-98432) #patchmanagement
  • 0
  • 0
  • 0
  • 17h ago
Profile picture fallback
Hacker News 20 @betterhn20.e-work.xyz
TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf (https://news.ycombinator.com/item?id=50319143)
  • 0
  • 0
  • 6
  • 13h ago
Profile picture fallback
Hacker News JP @hacker-news-jp.bsky.social
💡 Summary: Linux 4.4以降に影響するCVE-2026-98432は、IPv4のTCP接続処理における重大なuse-after-free脆弱性で、認証なしのリモート攻撃や、特定条件下でのroot権限奪取につながる可能性があります。修正済みカーネルは複数の系列で公開されていますが、10月31日時点でUbuntuとRHELには未提供のため、各ディストリビューションの状況を確認して更新・再起動し、適用までの間はIPv4オプション付きTCP通信の遮断などを検討してください。
  • 0
  • 0
  • 0
  • 7h ago
Profile picture fallback
Hacker News JP @hacker-news-jp.bsky.social
TCPのUse-After-Free脆弱性：CVE-2026-98432／CVSS 9.8 TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 🔺 340 💬 36 🔗 HN Post | Article
  • 0
  • 0
  • 0
  • 7h ago
Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
Linode Status - Customer Security Advisory: CVE-2026-98432
  • 0
  • 0
  • 0
  • 1h ago
Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
CVE-2026-98432 Linux TCP Flaw, Ubuntu Patch and Mitigation Status
  • 0
  • 0
  • 0
  • 1h ago
Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
netprobe-cve-2026-98432: You should patch, but not worry about CVE-2026-98432
  • 0
  • 0
  • 0
  • Last hour

CVE-2026-58882

Overview

  • Pending
Pending
Published
Pending
Updated
CVSS
Pending
EPSS
Pending
KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

  • 7 Posts
  • 47 Interactions
Last activity: 2 hours ago

Fediverse

Profile picture fallback
AI6YR Ben @ai6yr

oh yay

""SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.

The zero-click denial-of-service flaw can interrupt ongoing calls, including emergency calls, without requiring any interaction from the target. What's worse, Android processes the message before it reaches the SMS inbox, leaving victims with no visible indication of what caused their phones to crash."

bleepingcomputer.com/news/secu

#cybersecurity #sms #android

  • 22
  • 19
  • 0
  • 17h ago
Profile picture fallback
The CyberSec Guru @guru

CVE-2026-58882 explained: how an 8-byte SMS kills Android’s phone process

An 8-byte WAP Push message crashes com.android.phone and drops calls on Android 12-17. Full breakdown of CVE-2026-58882, the SMS of Death bug

thecybersecguru.com/exploits/c

  • 0
  • 0
  • 0
  • 16h ago
Profile picture fallback
Kyle Reddoch (CybersecKyle) @cyberseckyle

Researcher Mark B disclosed Android CVE-2026-58882, dubbed 'SMS of Death.' A hidden WAP Push message can crash calling services with no tap; repeated delivery may cause reboot loops. This is denial of service, not device takeover.

An AOSP fix exists, but public bulletin timing and manufacturer rollout remain uncertain. Admins: inventory Android versions and verify device updates.

smsofdeath.com/

  • 0
  • 0
  • 0
  • 14h ago
Profile picture fallback
Links Abbieger ❤️‍🔥✊ @vazules

RE: mastodon.social/@vazules/11716

Android „SMS des Todes“ (2026) Sicherheitslücke lässt Android Smartphones abstürzen + Fehlerhebung bei Bootloop / Ursachenforschung

reddit.com/r/Computersicherhei

  • 0
  • 0
  • 0
  • 2h ago
Profile picture fallback
Links Abbieger ❤️‍🔥✊ @vazules

Android „SMS des Todes“ (2026) Sicherheitslücke lässt Android Smartphones abstürzen + Fehlerhebung bei Bootloop / Ursachenforschung

#Cybersicherheit #ITSicherheit #Android #Y38K

reddit.com/r/Computersicherhei

  • 0
  • 0
  • 0
  • 2h ago

Bluesky

Profile picture fallback
BleepingComputer @bleepingcomputer.com
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.
  • 2
  • 4
  • 1
  • 18h ago

CVE-2026-111497

Overview

  • Google
  • Brotli
  • github.com/google/brotli
22 Oct 2026
Published
30 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
82.64%
KEV

Description

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Statistics

  • 5 Posts
  • 4 Interactions
Last activity: 13 hours ago

Fediverse

Profile picture fallback
Günter Born @gborn

Die #Brotli #Schwachstelle CVE-2026-111497 reicht über node.js hinaus. Daher prüfen, was betroffen ist und reagieren

borncity.com/blog/2026/10/31/h

  • 2
  • 1
  • 1
  • 14h ago
Profile picture fallback
halil deniz @halildeniz

🚨 Critical flaw alert! CVE-2026-111497 hits Node.js Brotli decoder with a 9.2 CVSS score. Learn how this out-of-bounds write leads to RCE & DoS, plus how to secure your runtime:

denizhalil.com/2026/10/31/cve-

#NodeJS #CyberSecurity #CVE2026111497

  • 0
  • 0
  • 0
  • 22h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CISA KEV | CVE-2026-111497 | Google / Brotli CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1347
  • 1
  • 0
  • 0
  • 20h ago
Profile picture fallback
r/blueteamsec bot @r-blueteamsec.bsky.social
cve-2026-111497-wordpress-poc: CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress
  • 0
  • 0
  • 0
  • 13h ago

CVE-2026-109618

Overview

  • PHP Group
  • PHP
  • php-src
21 Oct 2026
Published
30 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
100.00%
KEV

Description

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

Statistics

  • 4 Posts
  • 1 Interaction
Last activity: 4 hours ago

Fediverse

Profile picture fallback
Michael K. Laweh (Klytron) @klytron

🚨 Critical 9.2 CVSS advisory: PHP2Shell (CVE-2026-109618 & CVE-2026-109619) impacts PHP 5.4 to 8.5.

Remember: Updating WordPress plugins or Laravel code will NOT save you. This is an unauthenticated core C memory corruption flaw in the PHP runtime engine itself.

Check your binaries and update your server packages immediately. Full patching runbook here:

klytron.com/blog/php2shell-cve #PHP #CyberSecurity #DevOps #Infosec

  • 0
  • 0
  • 0
  • 9h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CISA KEV | CVE-2026-109618 | PHP Group / PHP CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1346
  • 1
  • 0
  • 0
  • 20h ago
Profile picture fallback
CyberVeille @cyberveille-ch.bsky.social
📢 php2shell : analyse technique des CVE-2026-109618 et CVE-2026-109619 affectant le cœur PHP Cet article constitue une analyse technique de première main sur les vulnérabilités php2shell (CVE-2026-109618 et CVE-2026-109619)… 🟡 vérification factuelle moyenne #php2shell #RCEPréAuth #Cyberveille
  • 0
  • 0
  • 0
  • 10h ago
Profile picture fallback
Undercode Testing @undercode.bsky.social
Defending Modern Web Infrastructure: Navigating PHP2Shell RCE Flaws, Certificate Authority Weaknesses, and Rapid WordPress Exploitation + Video Introduction: The discovery of the critical "PHP2Shell" remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) alongside compromised…
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-120198

Overview

  • WAVLINK
  • WL-WN530BE1-A
01 Nov 2026
Published
01 Nov 2026
Updated
CVSS v4.0
CRITICAL (10.0)
EPSS
Pending
KEV

Description

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

Statistics

  • 3 Posts
Last activity: Last hour

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-120198 — CRITICAL command injection (CVSS 10) in WAVLINK WL-WN530BE1-A via con_check_read_finish in /protocol.csp. Remote code execution possible; public exploit out, no patch yet. Restrict device access & monitor for updates: radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 3h ago
Profile picture fallback
OffSequence @offseq

WAVLINK WL-WN530BE1-A V251117 is impacted by CRITICAL CVE-2026-120198 (CVSS 10) – remote, unauthenticated command injection in /protocol.csp. Exploit code is public, no patch yet. Isolate devices from untrusted networks now. radar.offseq.com/threat/a-vuln

  • 0
  • 0
  • 0
  • Last hour

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CVE Radar | CVE-2026-120198 | CVSS 10.0 WAVLINK Router Command Injection CVE-2026-120198 affects WAVLINK WL-WN530BE1-A version V251117. Full analysis: https://t.me/aiutocomputerhelp_lab/1350
  • 0
  • 0
  • 0
  • 3h ago

CVE-2026-46300

Overview

  • Linux
  • Linux
23 May 2026
Published
29 Oct 2026
Updated
CVSS v3.1
HIGH (7.8)
EPSS
16.13%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.

Statistics

  • 3 Posts
Last activity: 20 hours ago

Fediverse

Profile picture fallback
𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Latest: G20 'family photo' cancelled as nations boycotted Russia (Oct 31). Iran escalated Strait of Hormuz tensions with mine deployments (Oct 30). In tech, AI spending concerns impacted major stocks like Alphabet and Intel. Cybersecurity: CISA warned of active Linux kernel (CVE-2026-46300) and PHP2Shell vulnerability exploits.

#AnonNews_irc #Cybersecurity #News

  • 0
  • 0
  • 0
  • 23h ago
Profile picture fallback
Michael I Ransier @thecybermind

(CISA TS+SOC) The Cyber Mind TSUITE Report: CVE-2026-46300 – Linux Kernel Missing Initialization of a Variable Vulnerability

An exhaustive technical breakdown of CVE-2026-46300 targeting the Linux Kernel XFRM subsystem, complete with multi-vendor SIEM detection logic, namespace monitoring, and hardening controls....

thecybermind.co/d7a8

  • 0
  • 0
  • 0
  • 21h ago
Profile picture fallback
Michael I Ransier @thecybermind

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-46300 – Linux Kernel Missing Initialization of a Variable Vulnerability

An executive-level strategic brief analyzing CVE-2026-46300 for CEOs and Boards, focusing on kernel security governance, supply chain vetting, and enterprise risk mitigation....

thecybermind.co/l9re

  • 0
  • 0
  • 0
  • 20h ago

CVE-2026-120189

Overview

  • D-Link
  • DIR-505
01 Nov 2026
Published
01 Nov 2026
Updated
CVSS v4.0
CRITICAL (10.0)
EPSS
Pending
KEV

Description

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Statistics

  • 2 Posts
Last activity: 8 hours ago

Fediverse

Profile picture fallback
OffSequence @offseq

CVE-2026-120189: CRITICAL buffer overflow in D-Link DIR-505 v1.10B02 (TFTP handler). Remote, unauthenticated code execution possible. Exploit code public; patch unknown. Disable/restrict TFTP access ASAP. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 8h ago

Bluesky

Profile picture fallback
Aiutocomputerhelp.it @aiuto-ch.bsky.social
CVE Radar | CVE-2026-120189 | CVSS 10.0 Critical D-Link DIR-505 TFTP Overflow CVE-2026-120189 affects D-Link DIR-505 version 1.10B02. Full analysis: https://t.me/aiutocomputerhelp_lab/1348
  • 0
  • 0
  • 0
  • 8h ago

CVE-2026-109619

Overview

  • PHP Group
  • PHP
  • php-src
21 Oct 2026
Published
30 Oct 2026
Updated
CVSS v4.0
CRITICAL (9.2)
EPSS
100.00%
KEV

Description

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

Statistics

  • 3 Posts
Last activity: 4 hours ago

Fediverse

Profile picture fallback
Michael K. Laweh (Klytron) @klytron

🚨 Critical 9.2 CVSS advisory: PHP2Shell (CVE-2026-109618 & CVE-2026-109619) impacts PHP 5.4 to 8.5.

Remember: Updating WordPress plugins or Laravel code will NOT save you. This is an unauthenticated core C memory corruption flaw in the PHP runtime engine itself.

Check your binaries and update your server packages immediately. Full patching runbook here:

klytron.com/blog/php2shell-cve #PHP #CyberSecurity #DevOps #Infosec

  • 0
  • 0
  • 0
  • 9h ago

Bluesky

Profile picture fallback
CyberVeille @cyberveille-ch.bsky.social
📢 php2shell : analyse technique des CVE-2026-109618 et CVE-2026-109619 affectant le cœur PHP Cet article constitue une analyse technique de première main sur les vulnérabilités php2shell (CVE-2026-109618 et CVE-2026-109619)… 🟡 vérification factuelle moyenne #php2shell #RCEPréAuth #Cyberveille
  • 0
  • 0
  • 0
  • 10h ago
Profile picture fallback
Undercode Testing @undercode.bsky.social
Defending Modern Web Infrastructure: Navigating PHP2Shell RCE Flaws, Certificate Authority Weaknesses, and Rapid WordPress Exploitation + Video Introduction: The discovery of the critical "PHP2Shell" remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) alongside compromised…
  • 0
  • 0
  • 0
  • 4h ago

CVE-2026-88812

Overview

  • X.org
  • xorg-x11-server
  • xorg-x11-server
27 Oct 2026
Published
27 Oct 2026
Updated
CVSS v3.1
HIGH (7.8)
EPSS
0.19%
KEV

Description

A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.

Statistics

  • 1 Post
  • 8 Interactions
Last activity: 8 hours ago

Fediverse

Profile picture fallback
XLibre @XLibreDev

We released the #XLibre Xserver 25.0.0.26, 25.1.11, and beta 25.2.3 in the last few days with fixes for #CVE-2026-88812, 93515 through 93524, 93536, and more. We recommend everyone update ASAP.

github.com/X11Libre/xserver/re
github.com/X11Libre/xserver/re
github.com/X11Libre/xserver/re

  • 4
  • 4
  • 0
  • 8h ago

CVE-2026-23279

Overview

  • Linux
  • Linux
25 Mar 2026
Published
15 Oct 2026
Updated
CVSS
Pending
EPSS
0.14%
KEV

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() In mesh_rx_csa_frame(), elems->mesh_chansw_params_ie is dereferenced at lines 1638 and 1642 without a prior NULL check: ifmsh->chsw_ttl = elems->mesh_chansw_params_ie->mesh_ttl; ... pre_value = le16_to_cpu(elems->mesh_chansw_params_ie->mesh_pre_value); The mesh_matches_local() check above only validates the Mesh ID, Mesh Configuration, and Supported Rates IEs. It does not verify the presence of the Mesh Channel Switch Parameters IE (element ID 118). When a received CSA action frame omits that IE, ieee802_11_parse_elems() leaves elems->mesh_chansw_params_ie as NULL, and the unconditional dereference causes a kernel NULL pointer dereference. A remote mesh peer with an established peer link (PLINK_ESTAB) can trigger this by sending a crafted SPECTRUM_MGMT/CHL_SWITCH action frame that includes a matching Mesh ID and Mesh Configuration IE but omits the Mesh Channel Switch Parameters IE. No authentication beyond the default open mesh peering is required. Crash confirmed on kernel 6.17.0-5-generic via mac80211_hwsim: BUG: kernel NULL pointer dereference, address: 0000000000000000 Oops: Oops: 0000 [#1] SMP NOPTI RIP: 0010:ieee80211_mesh_rx_queued_mgmt+0x143/0x2a0 [mac80211] CR2: 0000000000000000 Fix by adding a NULL check for mesh_chansw_params_ie after mesh_matches_local() returns, consistent with how other optional IEs are guarded throughout the mesh code. The bug has been present since v3.13 (released 2014-01-19).

Statistics

  • 1 Post
  • 10 Interactions
Last activity: 5 hours ago

Fediverse

Profile picture fallback
Freifunk Neanderland @neanderfunk

Unsere ältesten Router mit 32 MB Arbeitsspeicher erhalten (doch) noch einmal ein Update, und der Neanderfunk hat ein zweites Standbein:
* batman-adv 2024.3 statt 2019.2
* Sparsameres Multicast, sobald alle Router einer Domain aktuell sind
* Neuer Supernode bei Freie Netze Südhessen, dort Weg ins Internet nicht über den Freifunk Rheinland
* Sicherheitslücken im WLAN-Mesh geschlossen (CVE-2026-23279)
Mehr im Blog: neanderfunk.de/update-fuer-uns
#Freifunk #Neanderfunk #Gluon #NRW

  • 3
  • 7
  • 0
  • 5h ago
Showing 1 to 10 of 51 CVEs