Etiqueta: CVE

Hosting Security Roundup: October 2026 — PHP2Shell, KVM Escapes and Every CVE That Mattered

TL;DR: October’s story was PHP2Shell — two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619) that allow unauthenticated remote code execution, exploited in the wild before the patches existed and now shipped…