CVE-2026-98432

Overview

Linux
Linux

15 Oct 2026

Published

31 Oct 2026

Updated

CVSS v3.1

CRITICAL (9.8)

EPSS

0.46%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu can concurrently process a retransmitted SYN for the same request socket, and send a SYNACK from tcp_check_req(). tcp_v4_send_synack() and inet_csk_route_req() read ireq->ireq_opt under rcu_read_lock() only, and ip_build_and_send_pkt() and ip_options_build() then read opt->optlen twice. Note that the SYNACK timer itself is not an issue: it holds a reference on its request socket, and inet_csk_reqsk_queue_drop() calls timer_delete_sync() before the child can be freed. Since commit 079096f103fa ("tcp/dccp: install syn_recv requests into ehash table"), request sockets are processed without holding the listener lock, so nothing prevents the child socket from being freed while the SYNACK is still being built. TCP child sockets do not have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt with a plain kfree(), leading to a use-after-free in ip_options_build(). A similar issue exists with request socket migration (net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE program). reqsk_timer_handler() clones the request socket with inet_reqsk_clone(), so that the old request socket and its clone share the same ireq_opt, then reqsk_migrate_reset() clears the pointer in the old one. Another cpu holding a reference on the old request socket can still be using these options (sending a SYNACK, or creating a child in tcp_v4_syn_recv_sock()) when the clone is freed, and tcp_v4_reqsk_destructor() also uses a plain kfree(). Readers already use RCU, and other paths replacing inet_opt (do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use kfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and tcp_v4_reqsk_destructor() as well. IPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock() duplicates the options. tcp_v6_reqsk_destructor() has the same migration issue with ipv6_opt, which is only set by CALIPSO. This will be addressed in a separate patch.

Statistics

30 Posts
51 Interactions

Last activity: Last hour

Fediverse

RobCampbell @RobCampbell

Here’s some Linux irony: Debian, known for its conservative release cycle, has already patched CVE-2026-98432 for Debian 12 and 13. Ubuntu was still working on fixes as of Oct. 30.

Anthropic demonstrated a remote-root exploit under specific conditions.

Stable releases and fast security fixes aren’t opposites. Check your vendor’s advisory before assuming you’re protected.

https://security-tracker.debian.org/tracker/CVE-2026-98432

#Linux #Debian #Ubuntu #OpenSource #Cybersecurity

11
5
0
13h ago

:PUA: Shlee is a nervious bean & @shlee

https://ubuntu.com/security/CVE-2026-98432

Ubuntu still haven’t released this fix? It’s been days since Debian released the new kernel? Wtf is going on Shuttleworth

2
5
0
1h ago

Mr.Nuclear Monster @MrNuclearMonster

ioquake3.org will be offline for a bit. Ubuntu hasn’t patched this yet https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf

This includes all services (irc relay, directory server) as this looks severe and I don’t have time right now to look into it more.

2
0
0
2h ago

Kyle Reddoch (CybersecKyle) @cyberseckyle

Linux CVE-2026-98432 is a TCP use-after-free. Anthropic demonstrated remote root against an MPTCP listener in a lab, not known in-the-wild exploitation. The underlying flaw is not limited to MPTCP.

Go 1.24+ enables MPTCP on Linux listeners by default. Inventory exposed services, check distro advisories and deploy fixed kernels.

https://www.anthropic.com/research/discovering-vulnerabilities-with-claude

#Cybersecurity #Infosec #Linux #PatchManagement

1
1
0
17h ago

Eckes :mastodon: @eckes

Did Canonical meanwhile communicate why their kernel fixes are still missing? https://ubuntu.com/security/CVE-2026-98432?utm_source=eckes

1
1
0
6h ago

Joachim "T-Rex" Weber [friendica] 🦖 🦔 🐲 @trex

Eine schwerwiegende als CVE-2026-98432 katalogisierte Sicherheitslücke im Linux-Kernel ist teilweise noch nicht gepatcht. Die Anthropic-KI Claude hat einen funktionierenden Exploit entwickelt.
Kritische Linux-Lücke: KI-Modell Claude entwickelt Root-Exploit

1
0
0
18h ago

poga 🐈 @poga

這年頭架服務真是有夠苦

https://blog.gslin.org/archives/2026/11/01/13313/linux-%E9%80%99%E6%AC%A1-mptcp-%E7%9A%84-use-after-free-%E6%BC%8F%E6%B4%9E-cve-2026-98432/

0
9
0
3h ago

La Contre-Voie @lacontrevoie

On ne vous en informe généralement pas ici, mais sachez que nous surveillons tous les jours s’il y a de nouvelles failles de sécurité sur chacun des logiciels que nous hébergeons, et appliquons systématiquement les correctifs nécessaires.

Tous nos serveurs sont déjà protégés contre les dernières failles sur Linux (CVE-2026-98432 9.8), Redis, Grafana, Nextcloud ou encore WordPress. PHP ne fait pas exception.

#sysadmin

1/2

0
4
0
5h ago

benzogaga33 :verified: @benzogaga33

CVE-2026-98432: Linux IPv4 UAF https://nvd.nist.gov/vuln/detail/cve-2026-98432

0
1
0
21h ago

Nellen :minato_sleep: :jack: @Nellen

je f5 comme si j'attendais un colis https://ubuntu.com/security/CVE-2026-98432

0
0
0
14h ago

@ConstellationUnion

CVE-2026-98432

so the cat's away?
that's why its so quiet out there?

0
0
0
7h ago

Gea-Suan Lin @gslin

https://blog.gslin.org/archives/2026/11/01/13313/linux-%e9%80%99%e6%ac%a1-mptcp-%e7%9a%84-use-after-free-%e6%bc%8f%e6%b4%9e-cve-2026-98432/

Linux 這次 MPTCP 的 Use-after-free 漏洞 (CVE-2026-98432)

#advisory #kernel #linux #mitigation #mptcp #multipath #network #patch #security #sysctl #tcp #ubuntu #UseAfterFree #vulnerability

0
0
0
5h ago

benzogaga33 :verified: @benzogaga33

CVE-2026-98432: blocking the Linux TCP bug until Ubuntu and Red Hat ship a fix https://getrff.com/blog/cve-2026-98432-linux-tcp-ip-options-block/

0
0
0
2h ago

Bluesky

EULE (EU Linux Evolution) @eulinuxevolutionde.eurosky.social

Securepoint zur Linux IPv4-TCP-Schwachstelle CVE-2026-98432 borncity.com/blog/2026/10... #Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Securepoint

0
4
0
23h ago

Hacker News Top Stories @hackernewsbot.bsky.social

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 | Discussion

0
1
1
12h ago

Blockchain Report @blockchainreport.bsky.social

Cardano Foundation warns of critical Linux kernel vulnerability (CVE-2026-98432), CVSS 9.8. Affects IPv4 TCP handling, risks remote code execution. Node operators urged to patch immediately from distro updates. Ubuntu patches reportedly in prep. #crypto #blockchain #news

0
1
0
8h ago

CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue https://aws.amazon.com/security/security-bulletins/2026-160-aws/

0
1
0
7h ago

TugaTech @tugate.ch

Um modelo do assistente Claude desenvolveu uma ferramenta de ataque capaz de executar comandos remotamente em servidores Linux sem autenticação, explorando a falha crítica CVE-2026-98432. 🚨 #anthropic #claude #falha #kernel #linux

0
0
0
23h ago

RHSB-2026-016 Use-after-free - kernel IPv4 (CVE-2026-98432) | Red Hat Customer Portal https://access.redhat.com/security/vulnerabilities/RHSB-2026-016

0
0
0
20h ago

Eyal Estrin ☁️ @eyalestrin.bsky.social

Anthropic AI model finds Linux kernel bug that leads to remote root access (CVE-2026-98432) #patchmanagement

0
0
0
16h ago

Hacker News 20 @betterhn20.e-work.xyz

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf (https://news.ycombinator.com/item?id=50319143)

0
0
5
12h ago

Hacker News JP @hacker-news-jp.bsky.social

💡 Summary: Linux 4.4以降に影響するCVE-2026-98432は、IPv4のTCP接続処理における重大なuse-after-free脆弱性で、認証なしのリモート攻撃や、特定条件下でのroot権限奪取につながる可能性があります。修正済みカーネルは複数の系列で公開されていますが、10月31日時点でUbuntuとRHELには未提供のため、各ディストリビューションの状況を確認して更新・再起動し、適用までの間はIPv4オプション付きTCP通信の遮断などを検討してください。

0
0
0
7h ago

Hacker News JP @hacker-news-jp.bsky.social

TCPのUse-After-Free脆弱性：CVE-2026-98432／CVSS 9.8 TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 🔺 340 💬 36 🔗 HN Post | Article

0
0
0
7h ago

r/blueteamsec bot @r-blueteamsec.bsky.social

Linode Status - Customer Security Advisory: CVE-2026-98432

0
0
0
Last hour

CVE-2026-58882

Overview

Pending

Pending

Published

Pending

Updated

CVSS

Pending

EPSS

Pending

MITRE

KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

7 Posts
47 Interactions

Last activity: 2 hours ago

Fediverse

AI6YR Ben @ai6yr

oh yay

""SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.

The zero-click denial-of-service flaw can interrupt ongoing calls, including emergency calls, without requiring any interaction from the target. What's worse, Android processes the message before it reaches the SMS inbox, leaving victims with no visible indication of what caused their phones to crash."

https://www.bleepingcomputer.com/news/security/new-android-sms-of-death-exploit-can-remotely-crash-unpatched-phones/

#cybersecurity #sms #android

22
19
0
17h ago

The CyberSec Guru @guru

CVE-2026-58882 explained: how an 8-byte SMS kills Android’s phone process

An 8-byte WAP Push message crashes com.android.phone and drops calls on Android 12-17. Full breakdown of CVE-2026-58882, the SMS of Death bug

https://thecybersecguru.com/exploits/cve-2026-58882-android-sms-of-death-explained/

0
0
0
16h ago

Kyle Reddoch (CybersecKyle) @cyberseckyle

Researcher Mark B disclosed Android CVE-2026-58882, dubbed 'SMS of Death.' A hidden WAP Push message can crash calling services with no tap; repeated delivery may cause reboot loops. This is denial of service, not device takeover.

An AOSP fix exists, but public bulletin timing and manufacturer rollout remain uncertain. Admins: inventory Android versions and verify device updates.

https://smsofdeath.com/

#Cybersecurity #Infosec #AndroidSecurity #PatchManagement

0
0
0
13h ago

Links Abbieger ❤️‍🔥✊ @vazules

RE: https://mastodon.social/@vazules/117168417111220058

Android „SMS des Todes“ (2026) Sicherheitslücke lässt Android Smartphones abstürzen + Fehlerhebung bei Bootloop / Ursachenforschung

https://www.reddit.com/r/Computersicherheit/comments/1xk8jfg/sms_des_todes_cve202658882_sicherheitsl%C3%BCcke_l%C3%A4sst/

0
0
0
2h ago

Links Abbieger ❤️‍🔥✊ @vazules

Android „SMS des Todes“ (2026) Sicherheitslücke lässt Android Smartphones abstürzen + Fehlerhebung bei Bootloop / Ursachenforschung

#Cybersicherheit #ITSicherheit #Android #Y38K

https://www.reddit.com/r/Computersicherheit/comments/1xk8jfg/sms_des_todes_cve202658882_sicherheitsl%C3%BCcke_l%C3%A4sst/

0
0
0
2h ago

Bluesky

BleepingComputer @bleepingcomputer.com

A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message.

2
4
1
17h ago

CVE-2026-111497

Overview

Google
Brotli
github.com/google/brotli

22 Oct 2026

Published

30 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

82.64%

MITRE

KEV

Description

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Statistics

5 Posts
4 Interactions

Last activity: 12 hours ago

Fediverse

Günter Born @gborn

Die #Brotli #Schwachstelle CVE-2026-111497 reicht über node.js hinaus. Daher prüfen, was betroffen ist und reagieren

https://borncity.com/blog/2026/10/31/http2shell-brotli-sicherheitsluecke-ueber-node-js-hinaus-pruefen/

2
1
1
14h ago

halil deniz @halildeniz

🚨 Critical flaw alert! CVE-2026-111497 hits Node.js Brotli decoder with a 9.2 CVSS score. Learn how this out-of-bounds write leads to RCE & DoS, plus how to secure your runtime:

https://denizhalil.com/2026/10/31/cve-2026-111497-nodejs-brotli-vulnerability-analysis/

#NodeJS #CyberSecurity #CVE2026111497

0
0
0
21h ago

Bluesky

Aiutocomputerhelp.it @aiuto-ch.bsky.social

CISA KEV | CVE-2026-111497 | Google / Brotli CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1347

1
0
0
19h ago

r/blueteamsec bot @r-blueteamsec.bsky.social

cve-2026-111497-wordpress-poc: CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress

0
0
0
12h ago

CVE-2026-109618

Overview

PHP Group
PHP
php-src

21 Oct 2026

Published

30 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

100.00%

MITRE

KEV

Description

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

Statistics

4 Posts
1 Interaction

Last activity: 3 hours ago

Fediverse

Michael K. Laweh (Klytron) @klytron

🚨 Critical 9.2 CVSS advisory: PHP2Shell (CVE-2026-109618 & CVE-2026-109619) impacts PHP 5.4 to 8.5.

Remember: Updating WordPress plugins or Laravel code will NOT save you. This is an unauthenticated core C memory corruption flaw in the PHP runtime engine itself.

Check your binaries and update your server packages immediately. Full patching runbook here:

https://www.klytron.com/blog/php2shell-cve-2026-109618-remote-code-execution-fix #PHP #CyberSecurity #DevOps #Infosec

0
0
0
8h ago

Bluesky

Aiutocomputerhelp.it @aiuto-ch.bsky.social

CISA KEV | CVE-2026-109618 | PHP Group / PHP CISA lists this vulnerability as exploited in the wild. Check affected products and vendor guidance. Source: CISA KEV Full analysis: https://t.me/aiutocomputerhelp_lab/1346

1
0
0
19h ago

CyberVeille @cyberveille-ch.bsky.social

📢 php2shell : analyse technique des CVE-2026-109618 et CVE-2026-109619 affectant le cœur PHP Cet article constitue une analyse technique de première main sur les vulnérabilités php2shell (CVE-2026-109618 et CVE-2026-109619)… 🟡 vérification factuelle moyenne #php2shell #RCEPréAuth #Cyberveille

0
0
0
9h ago

Undercode Testing @undercode.bsky.social

Defending Modern Web Infrastructure: Navigating PHP2Shell RCE Flaws, Certificate Authority Weaknesses, and Rapid WordPress Exploitation + Video Introduction: The discovery of the critical "PHP2Shell" remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) alongside compromised…

0
0
0
3h ago

CVE-2026-111585

Overview

TeamViewer
Full Client

27 Oct 2026

Published

27 Oct 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

0.29%

MITRE

KEV

Description

An integer overflow in the remote-control screen processing component of TeamViewer clients (Full Client, Portable and Remote Control App) prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the privileges of the viewer process. Exploitation requires a user to establish a remote-control session to an attacker-controlled or compromised host.

Statistics

2 Posts
1 Interaction

Last activity: 23 hours ago

Fediverse

ransomNews @ransomnews

⚠️ TeamViewer hosts can attack connecting computers

CVE-2026-111585 can crash viewers and may allow code execution; fixed in version 15.83.
🔗 read more: https://remedio.io/research/vulnerability-disclosures/remote-code-execution-in-teamviewer/

#ransomNews #cyberthreats #TeamViewer

1
0
0
23h ago

Bluesky

Eyal Estrin ☁️ @eyalestrin.bsky.social

Remote Code Execution in TeamViewer (CVE-2026-111585) #patchmanagement

0
0
0
23h ago

CVE-2026-120198

Overview

WAVLINK
WL-WN530BE1-A

01 Nov 2026

Published

01 Nov 2026

Updated

CVSS v4.0

CRITICAL (10.0)

EPSS

Pending

MITRE

KEV

Description

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

Statistics

2 Posts

Last activity: 2 hours ago

Fediverse

OffSequence @offseq

CVE-2026-120198 — CRITICAL command injection (CVSS 10) in WAVLINK WL-WN530BE1-A via con_check_read_finish in /protocol.csp. Remote code execution possible; public exploit out, no patch yet. Restrict device access & monitor for updates: https://radar.offseq.com/threat/cve-2026-120198-command-injection-in-wavlink-wl-wn530be1-a-ba1bf1be0ae2942e #OffSeq #Vuln #IoT

0
0
0
2h ago

Bluesky

Aiutocomputerhelp.it @aiuto-ch.bsky.social

CVE Radar | CVE-2026-120198 | CVSS 10.0 WAVLINK Router Command Injection CVE-2026-120198 affects WAVLINK WL-WN530BE1-A version V251117. Full analysis: https://t.me/aiutocomputerhelp_lab/1350

0
0
0
2h ago

CVE-2026-46300

Overview

Linux
Linux

23 May 2026

Published

29 Oct 2026

Updated

CVSS v3.1

HIGH (7.8)

EPSS

16.13%

MITRE

KEV

Description

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.

Statistics

3 Posts

Last activity: 19 hours ago

Fediverse

𝔸𝕟𝕠𝕟𝕪𝕞𝕠𝕦𝕤 :verified: @youranonnewsirc

Latest: G20 'family photo' cancelled as nations boycotted Russia (Oct 31). Iran escalated Strait of Hormuz tensions with mine deployments (Oct 30). In tech, AI spending concerns impacted major stocks like Alphabet and Intel. Cybersecurity: CISA warned of active Linux kernel (CVE-2026-46300) and PHP2Shell vulnerability exploits.

#AnonNews_irc #Cybersecurity #News

0
0
0
22h ago

Michael I Ransier @thecybermind

(CISA TS+SOC) The Cyber Mind TSUITE Report: CVE-2026-46300 – Linux Kernel Missing Initialization of a Variable Vulnerability

An exhaustive technical breakdown of CVE-2026-46300 targeting the Linux Kernel XFRM subsystem, complete with multi-vendor SIEM detection logic, namespace monitoring, and hardening controls....

https://thecybermind.co/d7a8

0
0
0
20h ago

Michael I Ransier @thecybermind

(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-46300 – Linux Kernel Missing Initialization of a Variable Vulnerability

An executive-level strategic brief analyzing CVE-2026-46300 for CEOs and Boards, focusing on kernel security governance, supply chain vetting, and enterprise risk mitigation....

https://thecybermind.co/l9re

0
0
0
19h ago

CVE-2026-120189

Overview

D-Link
DIR-505

01 Nov 2026

Published

01 Nov 2026

Updated

CVSS v4.0

CRITICAL (10.0)

EPSS

Pending

MITRE

KEV

Description

A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Statistics

2 Posts

Last activity: 7 hours ago

Fediverse

OffSequence @offseq

CVE-2026-120189: CRITICAL buffer overflow in D-Link DIR-505 v1.10B02 (TFTP handler). Remote, unauthenticated code execution possible. Exploit code public; patch unknown. Disable/restrict TFTP access ASAP. https://radar.offseq.com/threat/cve-2026-120189-stack-based-buffer-overflow-in-d-link-dir-505-3cde01417e371d27 #OffSeq #CVE #IoTSecurity

0
0
0
7h ago

Bluesky

Aiutocomputerhelp.it @aiuto-ch.bsky.social

CVE Radar | CVE-2026-120189 | CVSS 10.0 Critical D-Link DIR-505 TFTP Overflow CVE-2026-120189 affects D-Link DIR-505 version 1.10B02. Full analysis: https://t.me/aiutocomputerhelp_lab/1348

0
0
0
7h ago

CVE-2026-118539

Overview

Drupal
Commerce Core

30 Oct 2026

Published

31 Oct 2026

Updated

CVSS

Pending

EPSS

0.30%

MITRE

KEV

Description

Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41, from 3.0.0 to 3.3.13.

Statistics

2 Posts

Last activity: 16 hours ago

Fediverse

Cybersecurity & cyberwarfare @cybersecurity

Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539, in its Commerce Core module. The vulnerability is caused by missing authorization checks. “This module enables you to sell goods and […]
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

0
0
0
23h ago

Bluesky

Pia @cecallihelper.bsky.social

"Drupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539, in its Commerce Core module. The vulnerability is caused by missing authorization checks" securityaffairs.com/202162/secur... #cybersec #infosec finance data security policy

0
0
0
16h ago

CVE-2026-109619

Overview

PHP Group
PHP
php-src

21 Oct 2026

Published

30 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

100.00%

MITRE

KEV

Description

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

Statistics

3 Posts

Last activity: 3 hours ago

Fediverse

Michael K. Laweh (Klytron) @klytron

🚨 Critical 9.2 CVSS advisory: PHP2Shell (CVE-2026-109618 & CVE-2026-109619) impacts PHP 5.4 to 8.5.

Remember: Updating WordPress plugins or Laravel code will NOT save you. This is an unauthenticated core C memory corruption flaw in the PHP runtime engine itself.

Check your binaries and update your server packages immediately. Full patching runbook here:

https://www.klytron.com/blog/php2shell-cve-2026-109618-remote-code-execution-fix #PHP #CyberSecurity #DevOps #Infosec

0
0
0
8h ago

Bluesky

CyberVeille @cyberveille-ch.bsky.social

📢 php2shell : analyse technique des CVE-2026-109618 et CVE-2026-109619 affectant le cœur PHP Cet article constitue une analyse technique de première main sur les vulnérabilités php2shell (CVE-2026-109618 et CVE-2026-109619)… 🟡 vérification factuelle moyenne #php2shell #RCEPréAuth #Cyberveille

0
0
0
9h ago

Undercode Testing @undercode.bsky.social

Defending Modern Web Infrastructure: Navigating PHP2Shell RCE Flaws, Certificate Authority Weaknesses, and Rapid WordPress Exploitation + Video Introduction: The discovery of the critical "PHP2Shell" remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) alongside compromised…

0
0
0
3h ago

Quick check

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

CVE-2026-58882 explained: how an 8-byte SMS kills Android’s phone process

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky