PT-2026-121688

CVE-2026-38411

·

Published

2026-10-22

·

Updated

2026-10-22

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

@MarkusEicher70 MacMarkus, as you are asking, here a stupid question 🫩 The list below looks complete, but something is missing! For sure!
CVSS>=9.2 October 21st 2026
  1. PHP (Engine vulerability – "PHP2Shell") CVE-2026-109618 and CVE-2026-109619 Patched Versions: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 Information: follow-up patches probable
  2. compromised eMudhra private keys TLS intermediate CAs https://t.co/LPuZv1b3jN CVE-2026-111943 Affected: go, openjdk, docker, cloudflare, web browsers, +
  3. LiteLLM (Lieferketten-Sabotage) Version 1.107.0
  4. Gitlab CVE-2026-97229 Patched Versions:  19.4.x, 19.3.x and 19.2.x
  5. Apache Tomcat CVE-2026-38411
  6. Nodejs CVE-2026-105482, CVE-2026-105483 Patched Versions: v26.12.1, v24.22.1, v22.23.4
  7. Cisco Secure Email Gateway CVE-2026-0322
  8. Microsoft Windows CVE-2026-21413, CVE-2026-105016
Vendors
Affected products
Related identifiers
CVE-2026-38411
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com