Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. The project is not issuing an emergency fix for it. Instead, it recommends turning off a feature called
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
TN

The Hacker News

1h ago
0 0

Discussion

Start the conversation

Your voice can be the first to spark an engaging conversation.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest I…

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal sys…
TN

The Hacker News

8h ago
0
bleepingcomputer.com
Railway warns devs to rotate secrets after potential breach

Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlie…
Golden Greta

Golden Greta

9h ago
0
bleepingcomputer.com
LiteLLM release pipeline hacked to distribute info-stealer malw…

Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment v…
alex but tired

alex but tired

15h ago
0
bleepingcomputer.com
GitLab warns of new max severity code execution vulnerability

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable ser…
LK

Lars Khan

23h ago
0
thehackernews.com
Railway Says Intruder May Have Accessed Customer Secrets, Urges…

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon f…
Golden Greta

Golden Greta

1d ago
0
bleepingcomputer.com
Authorities disrupt nearly 11,000 cybercrime networks in Africa

Law enforcement agencies have disrupted nearly 11, 000 cybercriminal networks and arrested more than 1, 400 people in Operation Serengeti III, which targeted b…
TA

taylor??

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest I…

Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal sys…
TN

The Hacker News

8h ago
0
thehackernews.com
Railway Says Intruder May Have Accessed Customer Secrets, Urges…

Platform-as-a-Service (PaaS) provider Railway on Wednesday disclosed "anomalous activity" related to systems that store customer environment variables. Upon f…
Golden Greta

Golden Greta

1d ago
0
thehackernews.com
LiteLLM Suspects GitHub Token Leak in AI Gateway Logs Behind Ma…

LiteLLM on Wednesday disclosed that threat actors compromised "multiple independent security controls" to push a malicious version of the Python package contai…
TN

The Hacker News

1d ago
0
thehackernews.com
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RC…

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the…
TN

The Hacker News

1d ago
0
thehackernews.com
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloadin…

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed ta…
TN

The Hacker News

1d ago
0
thehackernews.com
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP …

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on…
LK

Lars Khan

1d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest