⤷ Title: Oracle E-Business Suite Flaw CVE-2026-101809 Scores CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:34:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Patch Update #CVE_2026_101634 #CVE_2026_101767 #CVE_2026_101808 #CVE_2026_101809 #Oracle #Oracle E_Business Suite #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 09:34:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Critical Patch Update #CVE_2026_101634 #CVE_2026_101767 #CVE_2026_101808 #CVE_2026_101809 #Oracle #Oracle E_Business Suite #Remote Code Execution
Daily CyberSecurity
Oracle E-Business Suite Flaw CVE-2026-101809 Scores CVSS 10.0
TL;DR Oracle fixed a CVSS 10.0 E-Business Suite vulnerability, CVE-2026-101809, in its October 2026 Critical Patch Update. The flaw lets an unauthenticated attacker take over the Workflow product …
⤷ Title: PHP Prepares Emergency Fix as Cloudflare Reports Early Attacks on Critical Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 23:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2026_109618 #CVE_2026_109619 #exploited in the wild #php #Remote Code Execution #waf #watchTowr #Web Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 20 Oct 2026 23:27:08 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2026_109618 #CVE_2026_109619 #exploited in the wild #php #Remote Code Execution #waf #watchTowr #Web Security
Daily CyberSecurity
PHP Prepares Emergency Fix for Two Critical Flaws After Leak Reveals RCE Risk
TL;DR The PHP team will ship a security release on October 21, 2026, at 14:00 UTC to fix two critical flaws rated CVSS v4.0 9.2. Leaks tie them to CVE-2026-109618 and CVE-2026-109619, described as…
⤷ Title: PHP Releases Fixes and Full Details for Two Critical Unauthenticated RCE Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 14:17:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #mod_php #php #PHP_FPM #Remote Code Execution #Web Security
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 14:17:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #mod_php #php #PHP_FPM #Remote Code Execution #Web Security
Daily CyberSecurity
PHP Releases Fixes and Full Details for Two Critical Unauthenticated RCE Flaws
TL;DR On October 21, 2026, the PHP team released PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12 to fix two critical PHP RCE vulnerabilities. Both CVE-2026-109618 and CVE-2026-109619 score CVSS v4.0 9.2 and…
⤷ Title: Node.js Fixes 10 Flaws, Including Brotli RCE and TLS Hostname Bypasses
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 15:48:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_105483 #CVE_2026_106069 #CVE_2026_111497 #eMudhra #nodejs #Remote Code Execution #tls
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 15:48:25 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_105483 #CVE_2026_106069 #CVE_2026_111497 #eMudhra #nodejs #Remote Code Execution #tls
Daily CyberSecurity
Node.js Fixes 10 Flaws, Including Brotli RCE and TLS Hostname Bypasses
TL;DR On October 21, 2026, the Node.js project shipped versions 22.23.4, 24.22.1 and 26.12.1 to fix 10 vulnerabilities. This Node.js security release patches four high-severity flaws, including a …
⤷ Title: PHP2Shell Exploited in the Wild as PoC Exploits and Full Details Go Public
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 02:49:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2026_109618 #CVE_2026_109619 #exploited in the wild #php #PHP2Shell #proof_of_concept #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 02:49:32 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cloudflare #CVE_2026_109618 #CVE_2026_109619 #exploited in the wild #php #PHP2Shell #proof_of_concept #Remote Code Execution
Daily CyberSecurity
PHP2Shell Exploited in the Wild as PoC Exploits and Full Details Go Public
TL;DR Attackers are now exploiting PHP2Shell, a pair of critical PHP remote code execution flaws tracked as CVE-2026-109618 and CVE-2026-109619. Amazon saw the first attempt on October 17, four da…
⤷ Title: Plex2Shell Exploit Chain Hits Plex Media Servers
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 07:27:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #Censys #cryptomining #CVE_2026_96656 #Plex #Plex Media Server #Plex2Shell #remote code execution #vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 07:27:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #Censys #cryptomining #CVE_2026_96656 #Plex #Plex Media Server #Plex2Shell #remote code execution #vulnerability
Information Security News
Plex2Shell Exploit Chain Hits Plex Media Servers
A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a …
⤷ Title: QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:03:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #NAS security #PHP2Shell #QNAP #QTS #QuTS hero #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:03:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_109618 #CVE_2026_109619 #NAS security #PHP2Shell #QNAP #QTS #QuTS hero #Remote Code Execution
Daily CyberSecurity
QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
TL;DR QNAP says the QNAP PHP2Shell vulnerabilities affect QTS, QuTS hero, QuTScloud and several QNAP apps. The two flaws, CVE-2026-109618 and CVE-2026-109619, let unauthenticated attackers run cod…
⤷ Title: ZDI Posts Unpatched Linux Kernel Flaw Details and Attack Chains on Public Mailing List
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 02:26:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ksmbd #Linux Kernel #privilege escalation #Remote Code Execution #SMB Direct #ZDI #zero_day
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 02:26:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ksmbd #Linux Kernel #privilege escalation #Remote Code Execution #SMB Direct #ZDI #zero_day
Daily CyberSecurity
ZDI Posts Unpatched Linux Kernel Flaw Details and Attack Chains on Public Mailing List
TL;DR Trend Micro’s Zero Day Initiative (ZDI) posted details of several unpatched Linux kernel vulnerabilities to the public kernel mailing list on October 22, 2026. Two KSMBD flaws carry a …
⤷ Title: FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 00:25:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #Fortinet #FortiSIEM #Horizon3 #Path Traversal #proof_of_concept #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 00:25:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_106173 #Fortinet #FortiSIEM #Horizon3 #Path Traversal #proof_of_concept #Remote Code Execution
Daily CyberSecurity
FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw
TL;DR Horizon3 has published a technical deep dive and proof-of-concept exploit for CVE-2026-106173, a critical FortiSIEM vulnerability rated CVSS 9.4. The flaw lets an unauthenticated attacker wr…
⤷ Title: ZDI Leaks Critical Linux Kernel Vulnerabilities to LKML
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #Linux Kernel #remote code execution #vulnerability #ZDI #zero_day
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 08:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability #Linux Kernel #remote code execution #vulnerability #ZDI #zero_day
Information Security News
ZDI Leaks Critical Linux Kernel Vulnerabilities to LKML
The Zero Day Initiative (ZDI) team at Trend Micro recently experienced an operational mishap. Specifically, researchers inadvertently copied several confidential vulnerability reports to the publi…