PHP will ship an out-of-cycle security release at 14:00 UTC today, October 21, for two critical vulnerabilities that its security team has rated 9.2 on the CVSS v4.0 scale but has not described. Security researchers at watchTowr say the two flaws allow remote code execution. Only the four supported PHP branches, 8.2 through 8.5, can receive the fix, and no exploitation has been reported so far.

#infosec #threatintel #security #php #two #critical #cvss

submitted by /u/LordAlfredo [link] [comments]

#programming #reddit #dev #critical #php #vulnerabilities #comments #link

Comments

#programming #lobsters #php #critical #release #security #upcoming

Article URL: https://news-web.php.net/php.announce/509 Comments URL: https://news.ycombinator.com/item?id=50172041 Points: 45 # Comments: 3

#hackernews #tech #startup #php #critical #release #security #upcoming

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially

#infosec #threatintel #code #critical #flaw #execution #exploit