PT-2026-118596 · Undefined · Undefined
CVE-2026-109618
·
تاريخ النشر
2026-10-20
·
تاريخ التحديث
2026-10-21
لا يوجد
لا تتوفر حاليًا تقييمات أو مقاييس للخطورة. سنحدّث المعلومات المقابلة في الصفحة فور توفرها.
THE BIGGEST VUNERABILITY IN WEBSITES HAVE BEEN FOUND.
This group just discovered a critical bug in PHP which is used on so many websites that we all use. THEY CAN UPLOAD ANY FILE THEY WANT TO ANY WEBSITE WITH THIS.
PHP has two critical bugs (CVE-2026-109618/109619) in its file upload progress tracker (on by default).
Attackers can send a crafted upload to hijack server memory and run any code they want (full remote takeover).
Affects tons of sites (WordPress etc.).
SENDING FEES TO THE GITHUB IN HIS BIO.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
Undefined