Tag

Watchtowr

All articles tagged with #watchtowr

security2 hours ago•2 min saved

PHP Accelerates Emergency Patch for Leaked Critical RCE Flaws

PHP maintainers are releasing emergency patches at 14:00 UTC on October 21 for two critical remote code execution vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619. Rated 9.2 on the CVSS v4.0 scale, these flaws were disclosed early after a leak on October 20. Only PHP versions 8.2 through 8.5 will receive fixes; older end-of-life versions remain unpatched. No active exploitation has been confirmed, but security firms urge immediate preparation.

via The Hacker News|

#cve-2026-109618 #cve-2026-109619 #php

cybersecurity2 months ago

GeoServer Zero-Day Faces Rapid Exploitation Attempts Amid Unpatched SQL Injection Flaw

An unpatched SQL injection vulnerability in the open-source geospatial platform GeoServer is under active exploitation. Disclosed on August 12, 2026, the flaw in the jsonArrayContains function allows unauthenticated attackers to inject SQL commands, potentially leading to remote code execution (RCE) in specific database configurations. Security firm watchTowr reported hundreds of probing attempts within hours of disclosure, though no confirmed compromises have been reported yet. Organizations are advised to restrict public access to exposed instances and monitor for vendor patches.

via The Hacker News|

#cybersecurity #geoserver #remote-code-execution