PHP2Shell Zero-Day Exploits Force Immediate Patch for Millions of Sites
Two critical PHP flaws, PHP2Shell, allow remote code execution on PHP 8.2.x and 8.3.x sites. Immediate patching and configuration hardening are mandatory.
patch
10 stories
Adobe Campaign Classic Patch: Eight Critical Flaws Fixed, Code Execution Risks Eliminated
Adobe released a patch for eight critical Campaign Classic vulnerabilities that could allow code execution and privilege escalation.
PHP2Shell RCE Exploits Force Immediate Patch for Millions of Sites
Two PHP core memory-safety flaws allow remote code execution on 69% of web servers, prompting emergency patches and site outages.
Tailscale Releases Urgent Patches After Uncoordinated Disclosure of Tailworm Vulnerabilities
Tailscale issued critical updates for Tailworm bugs after a public disclosure, affecting versions 0.18.0 through 0.20.0.
Tailscale SSH vulnerability Fixed in v1.104.4
Tailscale released v1.104.4 to fix the Tailscale SSH vulnerability that could let a compromised device gain root on other tailnet machines.
PHP2Shell CVEs Force Immediate Patch for Millions of Sites
Two critical PHP CVEs expose millions of sites to unauthenticated RCE; patches released, scanning activity detected, and mitigation steps outlined.
PHP2Shell RCE Exposes Web Apps – Immediate Patch Required
A remote code execution flaw in PHP2Shell allows attackers to run arbitrary commands on vulnerable servers. Apply the vendor patch before exploitation.
PHP2Shell RCE Exposes Palo Alto GlobalProtect VPN
Palo Alto Networks PAN-OS and Panorama servers exposed to PHP2Shell RCE; update to PHP 8.5.12 or later and apply vendor patches immediately.
Microsoft Patch Tuesday 2026: 1,417 Vulnerabilities Including Exploited Shell Bypass
Microsoft released 1,417 security updates on Oct 13, 2026, fixing 78 critical flaws including a Windows Shell bypass and a .NET Framework feature bypass.
Microsoft Patch Tuesday 2026: 1,417 Vulnerabilities, Including Exploited Shell Bypass and Exchange RCE
Microsoft released 1,417 patches on Oct 13, 2026, including an exploited Windows Shell bypass and a high-complexity Exchange RCE.