Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	High	8.1	RHSA-2026:88532	php:7.4 security update Red Hat, PHP, libzipRed Hat Enterprise Linux, PHP, libzip	Red Hat Security Advisories	Oct 23 02:41 UTC
RHSA-2026:88532CVE-2026-109618CVE-2026-109619php:7.4 security update Executive summary Red Hat has released an important-rated security update for the PHP 7.4 module on Red Hat Enterprise Linux 8.8 systems in its Update Services for SAP Solutions and Telecommunications Update Service channels. The advisory describes two PHP flaws, CVE-2026-109618 (memory corruption and possible remote code execution during request parsing) and CVE-2026-109619 (use-after-free after fatal error handling), and recommends applying the updated packages referenced in the advisory. Technical summary CVE-2026-109618 is described as an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution. CVE-2026-109619 is described as fatal error handling that retains stale request state, leading to a use-after-free. The advisory does not state the attack vector or preconditions beyond these descriptions, and it does not state a CVSS score; it refers readers to the CVE pages for that. Fixed package versions are listed as php-7.4.33-1.module+el8.8.0+25148+55cf9df9.2 and related php modules, with libzip, php-pear, and php-pecl packages also updated. The advisory does not state any workaround, and it does not state whether exploitation in the wild has occurred. Detection guidance is not stated; the advisory points to https://access.redhat.com/articles/11258 for update instructions. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88532 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP libzip Red Hat Enterprise Linux PHP libzip Red Hat Product SecurityPublished Oct 23, 2026 02:41 UTC Read the advisory
	High	8.1	RHSA-2026:88533	php:7.4 security update Red Hat, PHP, libzipRed Hat Enterprise Linux, PHP, libzip	Red Hat Security Advisories	Oct 23 02:34 UTC
RHSA-2026:88533CVE-2026-109618CVE-2026-109619php:7.4 security update Executive summary Red Hat has released a security update for the PHP 7.4 module on Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Extended Update Support systems. Red Hat rates the update as Important and says two PHP flaws are fixed, one of which can lead to remote code execution. The advisory recommends applying the update, and the instructions are in the Red Hat article it links. Technical summary The advisory describes two PHP flaws: CVE-2026-109618, an out-of-memory bailout during request parsing that leads to memory corruption and remote code execution, and CVE-2026-109619, where fatal error handling retains stale request state, causing a use-after-free. The advisory does not state attack vector details, required preconditions, or CVSS scores, and it refers readers to the CVE pages for those. Fixed package versions are listed as php-7.4.19-4.module+el8.6.0+25157+c2ff122e.3 and related php packages, with libzip-1.6.1-1.module+el8.3.0+6678+b09f589e and several PECL packages also updated. No workarounds or detection guidance are stated in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/errata/RHSA-2026:88533 Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity High Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Red Hat PHP libzip Red Hat Enterprise Linux PHP libzip Red Hat Product SecurityPublished Oct 23, 2026 02:34 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee