<![CDATA[Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.]]>Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out.

]]>https://forum.fedi.dk/topic/414a2492-5f43-4400-9988-f61f508a1a19/somebody-has-leaked-cve-2026-109618-and-cve-2026-109619-in-php-before-the-patch-is-out.RSS for NodeThu, 29 Oct 2026 08:15:05 GMTTue, 20 Oct 2026 16:39:16 GMT60<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 18:11:37 GMT]]>@8tpercent @standev @jwarlander @GossiTheDog I always thought it was Partial Half Pipes... TIL

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/husjon/statuses/117519882513532853https://forum.fedi.dk/post/https://fosstodon.org/users/husjon/statuses/117519882513532853Wed, 28 Oct 2026 18:11:37 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 16:29:15 GMT]]>@standev @jwarlander @GossiTheDog PHP stands for P lastic H yper P ipes, as we all know.

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/8tpercent/statuses/117519479938126744https://forum.fedi.dk/post/https://fosstodon.org/users/8tpercent/statuses/117519479938126744Wed, 28 Oct 2026 16:29:15 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 16:26:52 GMT]]>@jwarlander @8tpercent @GossiTheDog most of them, yes. i think it’s a type of plastic

]]>https://forum.fedi.dk/post/https://mstdn.social/users/standev/statuses/117519470583949415https://forum.fedi.dk/post/https://mstdn.social/users/standev/statuses/117519470583949415Wed, 28 Oct 2026 16:26:52 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 16:10:22 GMT]]>@8tpercent

So it's the tubes.. They are are made of PHP, then?

@GossiTheDog

]]>https://forum.fedi.dk/post/https://mastodon.nu/users/jwarlander/statuses/117519405726970736https://forum.fedi.dk/post/https://mastodon.nu/users/jwarlander/statuses/117519405726970736Wed, 28 Oct 2026 16:10:22 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 15:48:04 GMT]]>@GossiTheDog

]]>https://forum.fedi.dk/post/https://fosstodon.org/users/8tpercent/statuses/117519317995024898https://forum.fedi.dk/post/https://fosstodon.org/users/8tpercent/statuses/117519317995024898Wed, 28 Oct 2026 15:48:04 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 15:44:05 GMT]]>@GossiTheDog it's wild that SNL is covering PHP Security

]]>https://forum.fedi.dk/post/https://masto.hackers.town/users/weems/statuses/117519302379720043https://forum.fedi.dk/post/https://masto.hackers.town/users/weems/statuses/117519302379720043Wed, 28 Oct 2026 15:44:05 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 15:36:40 GMT]]>@GossiTheDog WHY ARE THERE INTERNET EXPOSED MANAGEMENT INTERFACES AAAAAAAAGH

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/sawaba/statuses/117519273212746415https://forum.fedi.dk/post/https://infosec.exchange/users/sawaba/statuses/117519273212746415Wed, 28 Oct 2026 15:36:40 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 15:32:27 GMT]]>This thread summerised for normies

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117519256602179261https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117519256602179261Wed, 28 Oct 2026 15:32:27 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 02:18:37 GMT]]>@z_ack @wdormann @GossiTheDog widdle Pawwo Awto (fucking eww) can't affowd it evewwwyon! STAHP

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/NosirrahSec/statuses/117516135156445408https://forum.fedi.dk/post/https://infosec.exchange/users/NosirrahSec/statuses/117516135156445408Wed, 28 Oct 2026 02:18:37 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 00:59:52 GMT]]>RE: https://infosec.exchange/@ajn142/117441275527489328

@GossiTheDog

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/ajn142/statuses/117515825484896945https://forum.fedi.dk/post/https://infosec.exchange/users/ajn142/statuses/117515825484896945Wed, 28 Oct 2026 00:59:52 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Wed, 28 Oct 2026 00:53:06 GMT]]>Palo-Alto just sent out a customer alert about PHP2Shell:

“We are aware of heightened threat actor activity targeting internet exposed management interfaces of PAN-OS devices (NGFW and Panorama) and recently disclosed vulnerabilities. If you haven't already done so, we strongly advise you to immediately protect your devices by following management interface best practice”

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117515798886610105https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117515798886610105Wed, 28 Oct 2026 00:53:06 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Tue, 27 Oct 2026 20:01:23 GMT]]>@wdormann @GossiTheDog They’re just a poor little company, how could they possibly afford the non-EOL software license?

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/z_ack/statuses/117514651779752048https://forum.fedi.dk/post/https://infosec.exchange/users/z_ack/statuses/117514651779752048Tue, 27 Oct 2026 20:01:23 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Tue, 27 Oct 2026 14:41:45 GMT]]>@GossiTheDog
Weird that using a FreeBSD version EOL'd over 5 years ago has consequences. 🤔

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117513394917052499https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117513394917052499Tue, 27 Oct 2026 14:41:45 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Tue, 27 Oct 2026 13:38:42 GMT]]>Citrix finally released Netscaler patches for PHP2Shell. Netscaler notably has no ASLR so I’d recommend patching.

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697263&articleTitle=Citrix_Security_Advisory_for_CVE_2026_109618_and_CVE_2026_109619

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117513147042829138https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117513147042829138Tue, 27 Oct 2026 13:38:42 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 15:53:23 GMT]]>@hanno @GossiTheDog
Ironically, that indeed sounds like something a security product vendor would do. 😂

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117508014334410643https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117508014334410643Mon, 26 Oct 2026 15:53:23 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 15:30:21 GMT]]>@wdormann @GossiTheDog I think you can always compile something with -nopie if you are in need of an extra insecure version.

]]>https://forum.fedi.dk/post/https://mastodon.social/users/hanno/statuses/117507923756253439https://forum.fedi.dk/post/https://mastodon.social/users/hanno/statuses/117507923756253439Mon, 26 Oct 2026 15:30:21 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 15:21:44 GMT]]>@GossiTheDog
It's kind of hard to not get ASLR on modern Linux. Did they set kernel.randomize_va_space=0? Or use a not-modern FreeBSD?

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117507889848942732https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117507889848942732Mon, 26 Oct 2026 15:21:44 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 14:47:01 GMT]]>@wdormann maybe they levelled up!

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117507753334811034https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117507753334811034Mon, 26 Oct 2026 14:47:01 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 14:34:44 GMT]]>@GossiTheDog
This is from what I'd expect to be the VM series, as it was snagged from Azure in May of this year. 🤷‍♂️

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117507705057933803https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117507705057933803Mon, 26 Oct 2026 14:34:44 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 14:22:18 GMT]]>@wdormann the VM Series one do, unless they’ve changed it since last I checked

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117507656153005299https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117507656153005299Mon, 26 Oct 2026 14:22:18 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 13:58:10 GMT]]>@GossiTheDog
They do?

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117507561252270863https://forum.fedi.dk/post/https://infosec.exchange/users/wdormann/statuses/117507561252270863Mon, 26 Oct 2026 13:58:10 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 12:40:55 GMT]]>@GossiTheDog I bet it sucks to be Palo's PHP-wrangler; but I'm morbidly curious what internal fork hell is implied by the gradually shifting ETAs. Last week they were all much closer together; over the weekend a few actually shipped ahead of schedule; while others have been pushed all the way to friday, including some of newer PAN-OS versions.

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117507257490845514https://forum.fedi.dk/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/117507257490845514Mon, 26 Oct 2026 12:40:55 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 12:11:08 GMT]]>@GossiTheDog bon après, en théorie, ce n’est pas l’équipement le plus exposé 😅
Enfin sa GUI.

]]>https://forum.fedi.dk/post/https://social.zdx.fr/users/xakan/statuses/117507140367036276https://forum.fedi.dk/post/https://social.zdx.fr/users/xakan/statuses/117507140367036276Mon, 26 Oct 2026 12:11:08 GMT<![CDATA[Reply to Somebody has leaked CVE-2026-109618 and CVE-2026-109619 in PHP before the patch is out. on Mon, 26 Oct 2026 11:06:15 GMT]]>Palo-Alto moved their patch dates for PHP2Shell up after that toot, patches available now. https://security.paloaltonetworks.com/CVE-2026-109618

]]>https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117506885261666389https://forum.fedi.dk/post/https://cyberplace.social/users/GossiTheDog/statuses/117506885261666389Mon, 26 Oct 2026 11:06:15 GMT