Telegraph

7x24 real-time news feed, auto refreshBeijing Time：

All A·Important B·Normal #PHP ✕
B
[Tencent Cloud releases PHP "php2shell" remote code execution vulnerability risk notice] On October 21, Tencent Cloud released PHP "php2shell" remote code execution vulnerability risk notice. The notice stated that Tencent Cloud Security Center detected that PHP was disclosed to have remote code execution vulnerabilities. The vulnerability numbers are CVE-2026-109618, CVE-2026-109619, and the code name is "php2shell". Compromises that could allow an unauthenticated, remote attacker to take full control of the server by sending a specially crafted multipart POST request, triggering memory corruption and ultimately remote code execution. In order to avoid business impact, Tencent Cloud Security recommends timely conduct security self-examination. If it is within the affected area, please update and repair it in time to avoid being invaded by external attackers.
#server#PHP#618#Tencent#Memory#AI10-21 23:08
B
On October 21st, PHP officially issued a statement stating that at approximately 15:00 UTC time on October 20th (Tuesday), two CVE numbers involving this vulnerability began to circulate in online forums and social media.
#PHP#AI10-21 23:00
B
On October 21st, OpenAI issued a statement on the serious vulnerability discovered in PHP software, pointing out that given the severity of the vulnerability and the widespread use of PHP, this is one of the most impactful vulnerabilities in recent times. OpenAI has pledged to provide $1 billion worth of subsidized access to support defenders through its "Daybreak for Frontline Defenders" program.
#OpenAI#Line#PHP#software#EA#AI10-21 22:35
B
[Google responds to PHP core vulnerabilities CVE-2026-109618 and CVE-2026-109619] On October 21, Google responded to PHP core vulnerabilities CVE-2026-109618 and CVE-2026-109619. Google said that the Google Cloud platform itself is not affected by these two vulnerabilities, but users running PHP on the platform may still be at risk. Google also said Gemini 4 Argon was involved in vulnerability discovery, exploit development, attack detection and patch verification.
#Gemini#Google#MINI#PHP#618#Google#U.S. stock trends10-21 22:20