Beat
Lead stories for the top of the home page. Tick it on any post to feature it.
3 stories
CVE-2026-109618 and CVE-2026-109619, both rated 9.2, allow unauthenticated command execution through a single HTTP request against servers running PHP-FPM or Apache mod_php. Emergency releases landed October 21 after the details leaked a day early.
TeamUpdraft says exposed cloud connection keys were revoked in UpdraftPlus 1.26.13/2.26.13, but Nethemba found the fix misses keys created in a nine-hour…
The PwnEscape flaw (CVE-2026-99999, CVSS 9.3) lets crafted guest packets corrupt host kernel memory via the IPv4 checksum path. Patched host kernels…
