⤷ Title: Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bind Mount Bypass #container security #CVE_2026_44849 #CVE_2026_44850 #docker #Portainer #privilege escalation
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 10:44:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Bind Mount Bypass #container security #CVE_2026_44849 #CVE_2026_44850 #docker #Portainer #privilege escalation
Daily CyberSecurity
Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
TL;DR Portainer has fixed two critical Portainer vulnerabilities, each rated CVSS 9.4, that let standard users mount host files into containers. One extends a bind mount bypass that survived two e…
⤷ Title: APT41 Deploys BlackX UEFI Bootkit Against Central Asian Diplomatic Agencies
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 09:18:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT41 #BlackLotus #BlackX UEFI bootkit #CVE_2022_21894 #kaspersky #Secure Boot
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 09:18:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT41 #BlackLotus #BlackX UEFI bootkit #CVE_2022_21894 #kaspersky #Secure Boot
Daily CyberSecurity
APT41 Deploys BlackX UEFI Bootkit Against Central Asian Diplomatic Agencies
TL;DR Security researchers uncovered a new firmware threat called the BlackX UEFI bootkit targeting diplomatic missions across Central Asia in early 2026. Built as a close copy of the infamous Bla…
⤷ Title: PHP2Shell: CVE-2026-109618 Pre-Auth RCE, I Tested It Locally and Here’s How It Works
════════════════════════
𐀪 Author: Anmol K Sachan
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:00:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve #php #penetration_testing
════════════════════════
𐀪 Author: Anmol K Sachan
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:00:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve #php #penetration_testing
Medium
PHP2Shell: CVE-2026-109618 Pre-Auth RCE, I Tested It Locally and Here’s How It Works
TL;DR
⤷ Title: PHP2Shell — TryHackMe Walkthrough
════════════════════════
𐀪 Author: Hasnain Ali Magwa
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 18:30:06 GMT
════════════════════════
⌗ Tags: #cve #tryhackme #ai_security #cybersecurity #php
════════════════════════
𐀪 Author: Hasnain Ali Magwa
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 18:30:06 GMT
════════════════════════
⌗ Tags: #cve #tryhackme #ai_security #cybersecurity #php
Medium
PHP2Shell — TryHackMe Walkthrough
Exploit the PHP2Shell runtime CVEs via session.upload_progress for unauthenticated RCE.
⤷ Title: Deep Dive: Anatomy of the PHP Unauthenticated RCE Vulnerabilities (CVE-2026–109618 &…
════════════════════════
𐀪 Author: jaeson Bernardsha
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 18:28:36 GMT
════════════════════════
⌗ Tags: #php #vulnerability #rce #cve
════════════════════════
𐀪 Author: jaeson Bernardsha
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 18:28:36 GMT
════════════════════════
⌗ Tags: #php #vulnerability #rce #cve
Medium
Deep Dive: Anatomy of the PHP Unauthenticated RCE Vulnerabilities (CVE-2026–109618 & CVE-2026–109619)
PHP remains the backbone of the modern web, powering over 75% of all known websites. When a vulnerability strikes the core engine, the…
⤷ Title: PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36
════════════════════════
𐀪 Author: Dev Talk
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:51:31 GMT
════════════════════════
⌗ Tags: #software_development #cve #php #rce #backend_development
════════════════════════
𐀪 Author: Dev Talk
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:51:31 GMT
════════════════════════
⌗ Tags: #software_development #cve #php #rce #backend_development
Medium
PHP Critical RCE Fix: Update to 8.5.12, 8.4.27, 8.3.36
On 21 October 2026 the PHP project released security updates for every supported branch, and the front page of php.net carries a banner…
⤷ Title: PHP2Shell: Fixing GHSA-w8hw-w9fx-j79w
════════════════════════
𐀪 Author: Hacktify
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:39:16 GMT
════════════════════════
⌗ Tags: #php2shell #cybersecurity #cve_2026_109618 #rce #cve_2026_109619
════════════════════════
𐀪 Author: Hacktify
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:39:16 GMT
════════════════════════
⌗ Tags: #php2shell #cybersecurity #cve_2026_109618 #rce #cve_2026_109619
Medium
PHP2Shell: Fixing GHSA-w8hw-w9fx-j79w
Web Exploitation | PHP | GHSA-w8hw-w9fx-j79w
⤷ Title: Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 04:05:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Authority #CVE_2026_91403 #eMudhra #GraalVM #java #Oracle #tls
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 04:05:52 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Certificate Authority #CVE_2026_91403 #eMudhra #GraalVM #java #Oracle #tls
Daily CyberSecurity
Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates
TL;DR Oracle has issued an out-of-band Oracle Java security alert for CVE-2026-91403, rated CVSS 9.1. The update distrusts intermediate CA certificates tied to the eMudhra compromise in Java SE an…
⤷ Title: Okta Patches Access Gateway Flaws, Including PHP2Shell and Admin Console Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 03:51:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_115546 #CVE_2026_115547 #Okta #Okta Access Gateway #PHP2Shell #SAML
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 03:51:31 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_115546 #CVE_2026_115547 #Okta #Okta Access Gateway #PHP2Shell #SAML
Daily CyberSecurity
Okta Patches Access Gateway Flaws, Including PHP2Shell and Admin Console Bugs
TL;DR On October 22, 2026, Okta disclosed four Okta Access Gateway vulnerabilities in three advisories. They include the PHP2Shell flaws in its PHP runtime and a CVSS 9.1 command execution bug in …
⤷ Title: Kiloview E3 NDI Encoder Flaws Allow Root Command Execution, CISA Warns
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:43:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #CVE_2026_107861 #CVE_2026_110243 #CVE_2026_92450 #ICS security #KiloView #NDI Encoder
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 01:43:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA #Command Injection #CVE_2026_107861 #CVE_2026_110243 #CVE_2026_92450 #ICS security #KiloView #NDI Encoder
Daily CyberSecurity
Kiloview E3 NDI Encoder Flaws Allow Root Command Execution, CISA Warns
TL;DR On October 22, 2026, CISA published advisory ICSA-26-295-01 covering nine Kiloview E3 vulnerabilities in the company’s NDI video encoder. Two command injection flaws score CVSS 9.9 and…