PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619
Vulnerabilities CVE-2026-109618 and CVE-2026-109619 have been disclosed in PHP which, under certain conditions, may allow unauthenticated remote code execution.
About Neil Palmer
This author has not written his bio yet.
But we are proud to say that Neil Palmer contributed 13 entries already.
Entries by Neil Palmer
Vulnerability in PRISMAproduction CVE-2026-3245
A deserialization vulnerability has been identified in PRISMAproduction which could allow an unauthenticated attacker on an adjacent network to execute arbitrary code.
SUSE local privilege escalation “Dirty Frag” CVE-2026-43284
SUSE has released a security update for the Linux kernel addressing the previously disclosed “Dirty Frag” vulnerabilities.
SUSE Linux “Copy Fail” vulnerability CVE-2026-31431
A vulnerability has been discovered in the SUSE Linux kernel which allows a local non-root user to gain full root access to the system.
React Server Components vulnerability CVE-2025-55182
A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.
PRISMAproduce Tech Java CVE-2025-21587, CVE-2025-30749, CVE-2025-50059, CVE-2025-50106 and CVE-2024-21147 vulnerabilities
PRISMAproduce Tech Java CVE-2025-30749, CVE-2025-50059, CVE-2025-50106, CVE-2025-21587 and CVE-2024-21147 vulnerabilities.
“Shai-Hulud” worm
“Shai-Hulud” worm specifically engineered to exploit the Node Package Manager (npm) ecosystem.
Apache Log4net vulnerability CVE-2018-1285
Compromised Log4net.dll configuration file can lead to attacks in applications.
Artifex Ghostscript vulnerability CVE-2023-43115
Artifex Ghostscript versions prior to 10.02.0 can lead to remote code execution via crafted PostScript documents.
Libcurl/curl vulnerability CVE-2023-38545 and CVE-2023-38546
Curl heap based buffer overflow when asked to pass the host name to the SOCKS5 proxy to resolve address.