LoginTechnical Advisory: PHP2Shell Pre-Auth RCE (CVE-2026-109618, CVE-2026-109619)
22 October 2026 at 12:11
[CRITICAL] | CVSS v4.0 9.2 | No exploitation observed by Bitdefender | Patch immediately
Normal view
Before yesterdayBusiness Insights Cybersecurity Blog by Bitdefender
-
Business Insights Cybersecurity Blog by Bitdefender
- Technical Advisory: PHP2Shell Pre-Auth RCE (CVE-2026-109618, CVE-2026-109619)
-
- Technical Advisory: AhsayCBS Exploitation Chain (CVE-2026-105133, CVE-2026-105134)
Technical Advisory: AhsayCBS Exploitation Chain (CVE-2026-105133, CVE-2026-105134)
15 October 2026 at 15:55
[CRITICAL] | CVSS 10.0 (CVE-2026-105134, per VulDB) | Active exploitation confirmed, listed in CISA KEV | Patch immediately
-
- Technical Advisory: wp2shell — Unauthenticated Remote Code Execution and Full Site Takeover in WordPress Core
Technical Advisory: wp2shell — Unauthenticated Remote Code Execution and Full Site Takeover in WordPress Core
27 July 2026 at 13:46
| CVSS 9.8 (out of 10) | Active exploitation confirmed | Patch to 6.9.5 / 7.0.2 immediately
-
- Bind Link Abuse: One Windows Feature, Many Ways to Blind Your EDR
Bind Link Abuse: One Windows Feature, Many Ways to Blind Your EDR
15 July 2026 at 08:52
I’d like to thank my coauthors, Andrei-Marius Muntea, Andrei Mermeze, Radu-Marian Portase, and Vlad Lazar, for their invaluable contributions to this research.
