Skip to content

Breaking

Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan
Attackers Hijack Staples and Dell Order Notifications for Voice Phishing
aiohttp multipart requests cause unbounded file descriptor retention in versions up to 3.14.3
Eclipse ioFog WebSocket Authentication Bypass Leaves Admin Control Unprotected in Unpatched Versions
Argo CD JSONnet Flaw Risks Server Crash and File Read for Low-Priv Users Up to 3.6.0
Argo CD Kustomize Injection Bug Lets Read-Only Users Run Code on Repo Servers
PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

CVE-2026-109618

Everything RedTeam Tribune has reported about CVE-2026-109618: 2 stories, newest first. Part of our Vulnerabilities coverage.

21 Oct
Vulnerabilities

PHP Remote Code Execution Flaws Rated 9.2 Trigger Emergency Patch Plan

PHP teams prepare for critical updates addressing two unconfirmed RCE vulnerabilities with a 9.2 CVSS score, targeting supported branches only.

21 Oct
Vulnerabilities

PHP RCE flaws at 9.2 CVSS severity prompt emergency patches for October 21 after WatchTowr confirms leaks

Leaked details of two critical PHP vulnerabilities lead maintainers to schedule emergency patches for October 21.