php2shell

php2shell vulnerabilities CVE-2026-109618, CVE-2026-109619 Operational information: 28 October 2026 16:46 CET Software list last status update: 30 October 2026 09:14 CET TLP:CLEAR This repository contains operational information regarding the critical PHP vulnerabilities tracked by CERT-EU as...

PHP 8.3.30 Remote Code Execution

PHP version 8.3.30 contains out-of-memory handling and stale request-state flaws that can lead to remote code execution. PHP version 8.3.36 fixes the issues...

PHP 5.4.23 PHP2Shell OOM Mitigation

PHP version 5.4.23 contains out-of-memory request-processing and stale request-state issues. The supplied patches provide a fail-closed mitigation for PHP2Shell...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check A single-file, read-only Bash script that che...

PHP2SHELL-POC

PHP2Shell — Vulnerability Research & Lab Analysis Research...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 CVE-2026-109619 php2shell CVE-202...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

RHEL 9 : php:8.2 (RHSA-2026:88834)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88834 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

php2shell-poc

PHP2Shell Patch-Management Lab — CVE-2026-109618 / CVE-2026-10...

PHP 7.3.33 Multiple Vulnerability Backport

An unofficial source patch for PHP version 7.3.33 ports upstream changes addressing out-of-memory corruption and stale request-state vulnerabilities...

PHP 5.6.40 Security Patch

PHP version 5.6.40 contains vulnerabilities in multipart request parsing and stale request state handling; this patch backports fixes for both issues...

PHP 5.3.29 php2shell Backport

An unofficial backport for PHP version 5.3.29 applies fixes for out-of-memory bailout and stale request-state vulnerabilities affecting Apache modphp...

PHP 8.5.11 / 8.4.26 / 8.3.35 / 8.2.34 Remote Code Execution

PHP versions before 8.5.12, 8.4.27, 8.3.36, and 8.2.35 contain out-of-memory corruption and stale request-owned global state flaws that can allow unauthenticated remote code execution. This submission provides vulnerability information and cPanel EasyApache 4 partial mitigation guidance...

SUSE CVE-2026-90343

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements while the wirelessdev is still present in the driver. cfg80211leavelocked and cfg80211stoppd already do this before invoki...

AZL-102519 CVE-2026-90343 affecting package kernel for versions less than 6.6.161.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements while the wirelessdev is still present in the driver. cfg80211leavelocked and cfg80211stoppd already do this before invoki...

CVE-2026-90343

CVE-2026-90343 is a use-after-free vulnerability in the Linux kernel cfg80211 WiFi subsystem. The functions cfg80211_stop_p2p_device() and cfg80211_stop_nan() fail to abort active PMSR (Passive Measurements for Spectrum Regulation) requests before removing the mac80211 subinterface from the drive...

CVE-2026-90343 wifi: cfg80211: stop PMSR before P2P and NAN teardown

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements while the wirelessdev is still present in the driver. cfg80211leavelocked and cfg80211stoppd already do this before invoki...

CVE-2026-90343: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements while the wirelessdev is still present in the driver. cfg80211leavelocked and cfg80211stoppd already do this before invoki...

PT-2026-94691

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 module where PMSR Passive Measurement Service Request request teardown fails to abort active measurements before the wireless dev is removed from the driv...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098970 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Refactor bind path to use free After an bind/unbind cycle, the ncm-notifyreq i...