#CVE

Cybersecurity23 October 2026

Critical PHP2Shell flaws threaten NetScaler. Vendor recommends securing administrative access immediately

NetScaler confirmed its appliances are affected by two critical PHP vulnerabilities: CVE-2026-109618 and CVE-2026-109619. The flaws may enable unauthenticated remote code execution. Patches are scheduled for 27 October 2026.

Source: NetScaler Product SecurityLearn more

UrgentCVSS 9,2/10

PHP2Shell: critical PHP vulnerabilities threaten web servers. Immediate update required

Two severe PHP interpreter vulnerabilities, CVE-2026-109618 and CVE-2026-109619, may allow unauthenticated remote code execution. Security patches were published on 21 October 2026.

Source: PHP Security Advisory / watchTowr / Google Cloud SecurityLearn more