NRG Networks Inc.

  Both CVE-2026-109618 and CVE-2026-109619 are critical PHP remote code execution (RCE) vulnerabilities collectively known as PHP2Shell . They affect PHP installations serving web requests, including PHP-FPM , Apache mod_php , php-cgi , FrankenPHP , and LiteSpeed . Immediate Action (Recommended) Update PHP to one of the fixed releases immediately: PHP 8.5.12 PHP 8.4.27 PHP 8.3.36 PHP 8.2.35 The PHP Security Team has stated that updating is the only safe choice . Verify Your Version php -v For RHEL-based systems: rpm -qa | grep php For Debian/Ubuntu: dpkg -l | grep php Temporary Mitigations (Until Patching Is Complete) PHP developers have published interim measures that may reduce exposure but do not eliminate risk . 1. Disable Upload Progress Tracking Add to php.ini : session.upload_progress.enabled = 0 Or for PHP-FPM pools: php_admin_flag[session.upload_progress.enabled] = off 2. Enable Strict Session Mode session.use_strict_mode = 1 PHP-FPM: php_admin_flag[session.use_strict_mo...

  Security Advisory: CVE-2026-76519 - Critical Cisco Secure Email Gateway Remote Code Execution Vulnerability Advisory ID: SA-2026-1015 Severity: Critical (CVSS 9.8) CVE: CVE-2026-76519 Affected Product: Cisco Secure Email Gateway (SEG) Date: October 15, 2026 Status: Actively Exploited in the Wild Executive Summary A critical vulnerability, CVE-2026-76519 , has been identified in Cisco Secure Email Gateway that allows an unauthenticated remote attacker to execute arbitrary commands with root privileges on affected appliances. The vulnerability is being actively exploited and has been added to the CISA Known Exploited Vulnerabilities (KEV) Catalog. Successful exploitation requires only that an attacker send a specially crafted email containing a malicious attachment through a vulnerable gateway. No valid credentials or user interaction are required. Organizations utilizing Cisco Secure Email Gateway should prioritize immediate remediation and threat hunting activities. Vu...