CyberSIXT Search

News

Every CyberSIXT summary, newest first, with a link to its story and to the original report.

Most articles on Wed 21 Oct (96); 9–13 on weekend days.

Show as table
Articles published per day
DayArticles published
Sun 11 Oct9
Mon 12 Oct56
Tue 13 Oct85
Wed 14 Oct86
Thu 15 Oct78
Fri 16 Oct61
Sat 17 Oct10
Sun 18 Oct10
Mon 19 Oct60
Tue 20 Oct86
Wed 21 Oct96
Thu 22 Oct84
Fri 23 Oct68
Sat 24 Oct13
Today, Sun 25 Oct9 so far
Exploited only
6 articles · 20–23 Oct

Fri 23 Oct· 1 article

  1. Okta fixes critical Access Gateway flaws enabling remote code execution

    Okta has released security advisories for four vulnerabilities in Okta Access Gateway (OAG), disclosed on 22 October 2026. The flaws span PHP runtime components (PHP2Shell) and the Admin Console, with the most severe being a command-execution bug rated…

    SecurityOnlineCVE-2026-109618CVE-2026-109618

Thu 22 Oct· 3 articles

  1. Gcore Offers Free Web Protection to Governments After PHP Attacks

    Gcore has announced that its WAAP Enterprise plan will be free for public agencies and government bodies until 31 December 2026. The move follows the php2shell vulnerabilities that disrupted public websites across Europe earlier in the week. Gcore states…

    SecurityOnlineCVE-2026-109618CVE-2026-109618
  2. cPanel Patches Actively Exploited PHP Flaws Threatening Shared Hosting

    Cpanel has released security updates addressing two PHP2Shell flaws and a WP Toolkit bug that affect shared hosting environments. The patches cover three CVEs: CVE-2026-109618 and CVE-2026-109619 in PHP, and CVE-2026-107663 in WP Toolkit. The PHP fixes are…

    SecurityOnlineCVE-2026-109618CVE-2026-109618
  3. QNAP Warns of Active PHP Flaws as Device Patches Remain Unavailable

    QNAP has warned that two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, in PHP itself threaten QTS, QuTS hero, QuTScloud and several QNAP apps. The flaws permit unauthenticated, remote code execution, with exploitation attempts already observed in…

    SecurityOnlineCVE-2026-109618CVE-2026-109618

Wed 21 Oct· 1 article

  1. PHP Fixes Two Critical Flaws That Could Let Attackers Run Code

    On 21 October 2026, the PHP team released updates to fix two critical, unauthenticated remote code execution flaws: CVE-2026-109618 and CVE-2026-109619, both rated 9.2 under CVSS v4. The vulnerabilities affect PHP 8.2 versions before 8.2.35, 8.3 before…

    SecurityOnlineCVE-2026-109618CVE-2026-109618

Tue 20 Oct· 1 article

  1. PHP Prepares Critical RCE Fixes as Leaked Flaws Raise Alarm

    PHP announced a security release for 21 October 2026 at 14:00 UTC to address two critical flaws, CVE-2026-109618 and CVE-2026-109619. The article says leaks describe them as remote code execution vulnerabilities and rate them CVSS v4.0 9.2. PHP’s advance…

    SecurityOnlineCVE-2026-109618CVE-2026-109618

No older articles match these filters.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device