PT-2026-118596 · Undefined · Undefined
CVE-2026-109618
·
Publicado
2026-10-20
·
Atualizado
2026-10-21
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
THE BIGGEST VUNERABILITY IN WEBSITES HAVE BEEN FOUND.
This group just discovered a critical bug in PHP which is used on so many websites that we all use. THEY CAN UPLOAD ANY FILE THEY WANT TO ANY WEBSITE WITH THIS.
PHP has two critical bugs (CVE-2026-109618/109619) in its file upload progress tracker (on by default).
Attackers can send a crafted upload to hijack server memory and run any code they want (full remote takeover).
Affects tons of sites (WordPress etc.).
SENDING FEES TO THE GITHUB IN HIS BIO.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Undefined