UptimeMag

News

This is an example of custom php code on a computer screen.News

PHP2Shell: Wordfence logs ongoing attacks, no confirmed compromises yet

Wordfence is tracking attacks against two critical PHP RCE vulnerabilities (CVE-2026-109618/109619): no confirmed compromises to date, but patching remains urgent.

Wordfence: aggiornare WordPress non basta contro le due RCE critiche in PHPNews

Wordfence: WordPress patching insufficient against two critical PHP RCEs

Wordfence tests two critical PHP RCEs: on updated WordPress running legacy PHP, the server still crashes regardless.

CVE-2026-1492: falla critica in User Registration & Membership, 60.000 siti WordPress a rischioNews

CVE-2026-1492: Critical flaw in User Registration & Membership, 60,000 WordPress sites at risk

Critical bug (CVSS 9.8) in User Registration & Membership plugin: creates admin account without login. Update to 5.1.3 immediately.

CloudLinux certifica AdminBolt: conversione CloudLinux 9 e Imunify360 dal pannelloNews

CloudLinux certifies AdminBolt: CloudLinux 9 conversion and Imunify360 from control panel

CloudLinux adds AdminBolt to officially supported control panels: CloudLinux 9 conversion and Imunify360 installation directly from the Modules menu.

USN-8930-2: Ubuntu estende a 26.10 la patch U-Boot già rilasciata per le LTSNews

USN-8930-2: Ubuntu extends U-Boot patch to 26.10 after LTS release

Ubuntu releases on 21 October the fix for Ubuntu 26.10 addressing U-Boot flaws already resolved on LTS versions a week prior.

USN-8950-1: Ubuntu corregge un buffer overflow in popplerNews

USN-8950-1: Ubuntu patches buffer overflow in poppler

Ubuntu releases patch for CVE-2026-107705, buffer overflow in poppler exploitable with long passwords on AESV3/R6 encrypted PDFs.

USN-8947-1: Ubuntu rimuove le CA emSign e Comodo compromesse anche da NSSNews

USN-8947-1: Ubuntu removes compromised emSign and Comodo CAs from NSS

Ubuntu releases USN-8947-1: the nss package removes emSign ECC Root G3 and Comodo AAA Services certificate authorities. Patched versions for each release.

USN-8951-1: Ubuntu corregge quattro falle DoS in c-ares, la libreria DNS di Node.js e curlNews

USN-8951-1: Ubuntu patches four DoS vulnerabilities in c-ares, the DNS library for Node.js and curl

Canonical has released advisory USN-8951-1 with patches for four vulnerabilities in c-ares across Ubuntu 16.04 to 26.04 LTS.

Real EstateNews

Infinity Core: six kernel root bugs, CloudLinux 9 and 10 already patched

Six kernel vulnerabilities with public exploits threaten shared hosting. CloudLinux 9 and 10 have patched kernels ready, but CageFS alone won't stop them.

USN-8890-2: Ubuntu estende a 26.10 la patch libsoup con otto CVENews

USN-8890-2: Ubuntu extends libsoup patch to 26.10 covering eight CVEs

Canonical released the libsoup3 patch for Ubuntu 26.10 on 21 October, the same fix that was distributed on 6 October for earlier releases.

PHP 8.5.12, 8.4.27, 8.3.36 e 8.2.35: patch per due RCE critiche non autenticateNews

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35: patches for two critical unauthenticated RCEs

PHP has released four versions addressing two CVSS 9.2 vulnerabilities allowing remote code execution without authentication. Update immediately and restart workers.

USN-8949-1: Ubuntu corregge bypass del sandbox in GhostscriptNews

USN-8949-1: Ubuntu patches Ghostscript sandbox bypass

Canonical releases updated libgs10 and libgs9 across all supported releases to fix two vulnerabilities enabling -dSAFER sandbox escape.

PHP critico su Bare Metal e VPS OVHcloud: come verificare e aggiornare passo passoNews

Critical PHP vulnerability on OVHcloud Bare Metal and VPS: verification and step-by-step update guide

OVHcloud publishes procedure for Bare Metal and VPS customers against two critical PHP CVEs: commands, patched versions, temporary mitigations.

This image shows a list of firewall rules.News

Cloudflare WAF now inspects responses: debuts to block php2shell

Cloudflare adds full HTTP transaction inspection to its WAF, not just requests. Available immediately on the Free plan too.

php2shell: Cloudflare blocca via WAF due falle critiche nel runtime PHPNews

php2shell: Cloudflare blocks critical PHP runtime vulnerabilities via WAF

Cloudflare activated WAF rules against CVE-2026-109618 and CVE-2026-109619 nine hours before disclosure. On 23 October, a third flaw, CVE-2026-115560, emerged.

PHP2Shell: Bunny Shield blocca al margine le due RCE critiche in attesa della patchNews

PHP2Shell: Bunny Shield blocks critical RCE vulnerabilities pending patches

Two critical PHP flaws (CVSS 9.2) exploited in the wild: patched versions and Bunny Shield WAF rules for those not yet updated.

PHP CVE-2026-109618 e -109619: pacchetti CloudLinux e scudo Imunify360News

PHP CVE-2026-109618 and -109619: CloudLinux packages and Imunify360 shield

Two unauthenticated RCE flaws (CVSS 9.2) in PHP: status of ea-php and alt-php packages on CloudLinux and temporary mitigation via Imunify360.

USN-8946-1: dieci falle in Unbound su Ubuntu, una grave per cache poisoningNews

USN-8946-1: Ten Vulnerabilities in Unbound on Ubuntu, One Critical for Cache Poisoning

Canonical patches ten vulnerabilities in the Unbound DNS resolver across all supported Ubuntu releases, from 14.04 to 26.04 LTS.

PHP2Shell: come verificare se cPanel, Plesk o CloudLinux hanno già la patchNews

PHP2Shell: how to verify if cPanel, Plesk or CloudLinux are patched

Two critical PHP vulnerabilities (CVSS 9.2) are actively exploited. Here's which cPanel, Plesk and CloudLinux versions are already patched and how to check your server.

Ubuntu corregge una falla DoS in Protocol Buffers per PHP (CVE-2026-6409)News

Ubuntu patches Protocol Buffers DoS flaw in PHP (CVE-2026-6409)

Canonical releases patch for php-google-protobuf package on Ubuntu 24.04 and 26.04 LTS: fixes DoS vulnerability exploitable via malformed input.