Recent posts tagged cve

Exploring CVE-2026-109618 and CVE-2026-109619 through a TryHackMe lab. Introduction October is Cybersecurity Awareness Month, and honestly, this month has been quite interesting from a cybersecurity perspective. There have been plenty of vulnerabi...

The PHP Core rule SafeLine shipped on 21 October is not a generic "block all uploads" switch. It is aimed at request features from the known chain behind CVE-2026-109618 and CVE-2026-109619. Four signs are called out in the rule note. A request that...

A SafeLine hit on the PHP Core rule is a starting point, not a closed case. CVE-2026-109618 and CVE-2026-109619 are serious because a crafted request can disturb the runtime or leave worker state behind. If the rule fires, or if the server looks wron...

The failure mode in this PHP advisory is not "we upgraded PHP." It is "we upgraded one PHP and left three others running." CVE-2026-109618 and CVE-2026-109619 are in PHP Core, so every branch on the host is its own decision. Build a table before you...

File upload is the practical entry for CVE-2026-109618. The weakness is in PHP's handling of multipart/form-data and the memory state around that parse, not in a single shopping-cart plugin. An attacker does not need a valid image. They need a reque...

As network vulnerabilities pile up faster than teams can patch them, most of the AI conversation in NetOps has centered on autonomy: letting AI agents make and execute changes on their own. BackBox is making a different bet. With the launch of its Ki...