Social Media Ideas for Cve-2026-109619

Latest updates for Cve-2026-109619

Fresh curated links around cve-2026-109619 are collected here so marketers can spot useful updates and turn timely ideas into posts faster.

Post angles to try

Share the most useful takeaway for your audience.

Turn one article into a quick practical checklist.

Ask your audience how this shift affects their work.

Turn angles into scheduled posts

Fresh articles and ideas

Recent curated links from global sources. Generate one free draft from any story, then use SocialBu to schedule and refine your content calendar.

ubuntu.com /3 days ago

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The vulner...

Read source

pkguild.com /2 days ago

PHP2Shell (CVE-2026-109618/19): Broadcom & VMware Impact & Mitigation

&#x1F4A5; The Situation <p>On October 21, 2026, the PHP project released emergency patches to address two critical remote code execution</p>

Read source

dev.to /3 days ago

PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)

I published PHP2Shell, a proof-of-concept for two critical PHP vulnerabilities — CVE-2026-109618 and CVE-2026-109619 — that enable a heap use-after-free in session.upload_progress...

Read source

rubysec.com /1 month ago

CVE-2026-88030 (mongo): MongoDB Ruby Driver - Improper neutralization of special elements in data query logic in the Gri...

Originally appeared on RubySec.Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied struct...

Read source

jscrambler.com /2 days ago

Security Notice: PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

On 21 October 2026, the PHP project released emergency security updates for two critical vulnerabilities in the PHP interpreter, known together as “PHP2Shell.” Both are rated 9.2 (...

Read source

rubysec.com /1 month ago

CVE-2026-80213 (resolv): CVE-2026-80213 - Hostname validation bypass

Originally appeared on RubySec.An application that checks a hostname against an allow list or an SSRF filter and then resolves it can be made to look up a domain other than the one...

Read source

gbhackers.com /1 week ago

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote,...

Read source

dev.to /1 month ago

CVE-2026-16723: Pre-Auth RCE in Fastjson 1.x via the @JSONType Trust Branch

Overview CVE ID CVE-2026-16723 Affected Fastjson 1.2.68 – 1.2.83 (every 1.x release still receiving use) Preconditions Spring Boot executable fat-JAR, safeMode disab...

Read source

habr.com /1 day ago

Две критические уязвимости в PHP (CVE-2026-109618 и CVE-2026-109619): что известно и как защититься

21 октября были раскрыты две критические уязвимости PHP — CVE-2026-109618 и CVE-2026-109619, обе с CVSS 9.2. Их эксплуатация позволяет выполнять код без аутентификации с правами ве...

Read source

bleepingcomputer.com /1 month ago

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively...

Read source

dev.to /4 weeks ago

TDengine CVE-2026-42542: Unauthenticated Integer Underflow Crashes taosd with a Single Packet

1. Basic Information Original Title: One Packet Can Take Down the Database Behind Industrial Operations: Ridge Security Discovers CVE-2026-42542 Source: Ridge Security Published...

Read source

thehackernews.com /3 weeks ago

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation...

Read source

gbhackers.com /1 month ago

SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code

SolarWinds has released SolarWinds Observability Self-Hosted version 2026.2.3 to address two critical remote code execution (RCE) vulnerabilities. These vulnerabilities could allow...

Read source

forrester.com /2 days ago

PHP2Shell Leak Sends Security Teams Scrambling

At 14:00 UTC on October 21, PHP released patches to two critical CVEs, both of which can lead to remote code execution. CVE-2026-109618 addresses an RCE through an out-of-memory er...

Read source

dev.to /1 month ago

The Wider Adobe Patch Wave Behind CVE-2026-75650

The Wider Adobe Patch Wave Behind CVE-2026-75650 CVE-2026-75650 is the entry in CERT-In's CIVN-2026-0458 that demands immediate action, but it is not the only vulnerability in th...

Read source

infosecurity-magazine.com /1 week ago

Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool

CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic

Read source

rubysec.com /1 month ago

CVE-2026-85396 (rubyzip): path traversal vulnerability in pre-3.4.0 rubyzip gem

Originally appeared on RubySec.rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using pre...

Read source

vblog.io /1 week ago

PwnEscape (CVE-2026-99999) : une faille de la stack réseau du noyau Linux permet à une VM de s’échapper

Et hop, une nouvelle faille, publiée en fin de semaine… là, c'est très critique car il s'agit d'un problème de

Read source

dev.to /1 month ago

CVE-2026-81963: Why a Windows Update Stack Flaw Matters More Than Its 7.8 Score

CVE-2026-81963: Why a Windows Update Stack Flaw Matters More Than Its 7.8 Score Microsoft's September 2026 Patch Tuesday fixed 974 CVEs, the largest monthly release the company h...

Read source

thehackernews.com /1 month ago

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127,...

Read source

bleepingcomputer.com /1 month ago

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. [...]

Read source

rubysec.com /1 month ago

CVE-2026-80212 (resolv): CVE-2026-80212 - Memory exhaustion through malicious DNS responses

Originally appeared on RubySec.An application that resolves a hostname an attacker can influence, such as a webhook target or a user-supplied URL, can be made to consume memory wit...

Read source

rubysec.com /2 weeks ago

CVE-2026-107715 (mechanize): Mechanize sends credential headers to another host after an HTTP redirect

Originally appeared on RubySec.## Summary `mechanize` leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credentials set through `Mechanize#r...

Read source

gbhackers.com /1 month ago

Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency

Suspected Chinese-speaking operators exploited the critical ownCloud flaw CVE-2023-49105 to steal nuclear material records, research reactor data, personnel files, and encryption k...

Read source

Turn fresh research into a full content calendar

Use SocialBu to discover ideas, generate post drafts, and schedule them across your social channels.