Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
remotecodeexecution
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug
yutianle
yutianle
yutianle
Follow
Oct 23
Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
4 min read
Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Oct 23
Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 23
Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
CVE-2026-109619: the PHP flaw that outlives its own request
facilishz
facilishz
facilishz
Follow
Oct 23
CVE-2026-109619: the PHP flaw that outlives its own request
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 23
What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
Detecting exploitation attempts against CVE-2026-109618 without a public exploit
jeffrey
jeffrey
jeffrey
Follow
Oct 23
Detecting exploitation attempts against CVE-2026-109618 without a public exploit
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
Memory limits and attack windows: a defender's reading of CVE-2026-109618
StarkMan
StarkMan
StarkMan
Follow
Oct 23
Memory limits and attack windows: a defender's reading of CVE-2026-109618
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
Two days between warning and patch: how the PHP project handled CVE-2026-109618
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Oct 23
Two days between warning and patch: how the PHP project handled CVE-2026-109618
#
php
#
remotecodeexecution
#
cve2026109618
#
vulnerability
Comments
Add Comment
3 min read
PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws
TechPulse
TechPulse
TechPulse
Follow
Oct 23
PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws
#
php
#
cybersecurity
#
remotecodeexecution
#
cve2026109618
Comments
Add Comment
2 min read
PHP Core Vulnerabilities CVE-2026-109618 and CVE-2026-109619: Sysadmin Triage and Hardening Guide
Veduis
Veduis
Veduis
Follow
Oct 21
PHP Core Vulnerabilities CVE-2026-109618 and CVE-2026-109619: Sysadmin Triage and Hardening Guide
#
phpsecurity
#
cve2026109618
#
cve2026109619
#
remotecodeexecution
Comments
Add Comment
10 min read
CVE-2026-94545: when the social-card renderer becomes an unauthenticated code path
StarkMan
StarkMan
StarkMan
Follow
Oct 11
CVE-2026-94545: when the social-card renderer becomes an unauthenticated code path
#
vulnerability
#
web
#
node
#
remotecodeexecution
Comments
Add Comment
3 min read
Why code execution in an LLM orchestrator carries more weight than its CVSS score
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Oct 8
Why code execution in an LLM orchestrator carries more weight than its CVSS score
#
vulnerability
#
langflow
#
ibm
#
remotecodeexecution
Comments
Add Comment
2 min read
Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency
StarkMan
StarkMan
StarkMan
Follow
Oct 5
Langflow OSS against the rest of NCSC-2026-0392: ranking twelve fixes by real urgency
#
vulnerability
#
langflow
#
ibm
#
remotecodeexecution
Comments
Add Comment
2 min read
Why an Authenticated GitLab Account Is Enough for Server-Side Code Execution
yutianle
yutianle
yutianle
Follow
Oct 5
Why an Authenticated GitLab Account Is Enough for Server-Side Code Execution
#
vulnerability
#
gitlab
#
remotecodeexecution
#
cicd
Comments
Add Comment
2 min read
Joomla CVE-2026-48907 and CVE-2026-48908: Unauthenticated Upload in Two Extensions
jeffrey
jeffrey
jeffrey
Follow
Sep 30
Joomla CVE-2026-48907 and CVE-2026-48908: Unauthenticated Upload in Two Extensions
#
joomla
#
remotecodeexecution
#
cms
#
webshell
Comments
Add Comment
2 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account