CVE-2026-109619
In 5 briefs, most recently 30 October 2026. RSS for this tag
Published 2026-10-21
Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗
Known exploited (CISA KEV)
PHP Stale Internal Request-State Vulnerability.
Added 2026-10-26
Coverage in DanSec Daily
- Binance's $6.3B heist tied to TraderTraitor, Polymarket supply-chain hack, and critical CVEs in GitLab and Cisco SD-WAN exploited in the wild.
- Genesys data exposure, Quest Diagnostics patient-records breach and PHP2Shell RCE actively exploited against industrial vendors Siemens, Schneider Electric and …
- Quest Diagnostics patient data breach, Capcom's 11.7M-record exposure, and PHP2Shell RCE with no patch, plus Brotli and ArubaOS flaws.
- Railway secrets exposure, Onamae VPS malware on 26,739 servers, LiteLLM supply chain attack, and critical PHP2Shell RCE flaws under mass exploitation.
- Lazarus Group's FlashHole watering-hole campaign, Tor exit relay hijacking, and Zeabur's second breach in two months.