DEV Community

#remotecodeexecution

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug

Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug

Comments
4 min read
Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory

Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory

Comments
3 min read
Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release

Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release

Comments
3 min read
CVE-2026-109619: the PHP flaw that outlives its own request

CVE-2026-109619: the PHP flaw that outlives its own request

Comments
3 min read
What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618

What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618

Comments
3 min read
Detecting exploitation attempts against CVE-2026-109618 without a public exploit

Detecting exploitation attempts against CVE-2026-109618 without a public exploit

Comments
3 min read
Memory limits and attack windows: a defender's reading of CVE-2026-109618

Memory limits and attack windows: a defender's reading of CVE-2026-109618

Comments
3 min read
Two days between warning and patch: how the PHP project handled CVE-2026-109618

Two days between warning and patch: how the PHP project handled CVE-2026-109618

Comments
3 min read
PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws

PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws

Comments
2 min read
PHP Core Vulnerabilities CVE-2026-109618 and CVE-2026-109619: Sysadmin Triage and Hardening Guide

PHP Core Vulnerabilities CVE-2026-109618 and CVE-2026-109619: Sysadmin Triage and Hardening Guide

Comments
10 min read
CVE-2026-94545: when the social-card renderer becomes an unauthenticated code path

CVE-2026-94545: when the social-card renderer becomes an unauthenticated code path

Comments
3 min read
Why code execution in an LLM orchestrator carries more weight than its CVSS score

Why code execution in an LLM orchestrator carries more weight than its CVSS score

Comments
2 min read
Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency

Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency

Comments
2 min read
Why an Authenticated GitLab Account Is Enough for Server-Side Code Execution

Why an Authenticated GitLab Account Is Enough for Server-Side Code Execution

Comments
2 min read
Joomla CVE-2026-48907 and CVE-2026-48908: Unauthenticated Upload in Two Extensions

Joomla CVE-2026-48907 and CVE-2026-48908: Unauthenticated Upload in Two Extensions

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.