Dream researchers uncovered a Chinese-nexus PHP2Shell exploit Fragnesia chain that rooted 25 firewalls and breached a US government Active Directory.

Related Posts:

• GMO Internet Ransom Demand Slashed After Cloud Breach
• UAT-11473 Deploys KeyDrift Malware on Cisco SD-WAN Controllers via CVE-2026-20127
• Hive Ransomware Affiliate Artem Stryzhak Sentenced to 70 Months in US Prison

The post Chained PHP2Shell Exploit Roots 25 Firewall Servers Including US Government Systems appeared first on Daily CyberSecurity.

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.

Related Posts:

• Apple iOS 27.2 Update Fixes 160 Security Flaws
• Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones
• HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720)

The post CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface appeared first on Daily CyberSecurity.

Palo Alto confirms PAN-OS PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 affect the firewall management interface. Restrict access and patch.

Related Posts:

• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
• Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates

The post Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama appeared first on Daily CyberSecurity.

Okta fixes four Okta Access Gateway vulnerabilities, including PHP2Shell and CVE-2026-115547 command execution. Upgrade OAG to 2026.44.0.

Related Posts:

• Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama
• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS

The post Okta Patches Access Gateway Flaws, Including PHP2Shell and Admin Console Bugs appeared first on Daily CyberSecurity.

A cPanel PHP update fixes PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619, while WP Toolkit 6.11.5 patches CVE-2026-107663.

Related Posts:

• QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
• Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
• Fortinet Urges Fast Upgrades as AI-Found Flaws Hit FortiOS, FortiManager and FortiAnalyzer

The post cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers appeared first on Daily CyberSecurity.

QNAP PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 affect QTS, QuTS hero and apps. No patch yet, so take NAS devices offline.

Related Posts:

• cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
• Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts
• Fortinet Urges Fast Upgrades as AI-Found Flaws Hit FortiOS, FortiManager and FortiAnalyzer

The post QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline appeared first on Daily CyberSecurity.

PHP2Shell remote code execution flaws CVE-2026-109618 and CVE-2026-109619 are exploited in the wild as PoCs go public. Patch PHP now.

Related Posts:

• cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
• QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
• Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts

The post PHP2Shell Exploited in the Wild as PoC Exploits and Full Details Go Public appeared first on Daily CyberSecurity.

Cloudflare reports early attacks on two critical PHP flaws ahead of the PHP security release fixing remote code execution bugs CVE-2026-109618.

Related Posts:

• Atlassian Patches 176 Flaws in Jira, Confluence and Other Data Center Products
• Oracle E-Business Suite Flaw CVE-2026-101809 Scores CVSS 10.0
• Apache CouchDB 3.5.3 Fixes Six Flaws as Retired Apache Cocoon Gets Four Unpatched Bugs

The post PHP Prepares Emergency Fix as Cloudflare Reports Early Attacks on Critical Flaws appeared first on Daily CyberSecurity.