https://curadevops.metacog.co.kr/tags/php/Recent content in Php on CuraDevOpsHugoen-usFri, 23 Oct 2026 15:33:11 +0000https://curadevops.metacog.co.kr/insights/2026-10-23-php2shell-gitlab-helps-find-and-remediate-critical-php-flaws/Fri, 23 Oct 2026 15:33:11 +0000https://curadevops.metacog.co.kr/insights/2026-10-23-php2shell-gitlab-helps-find-and-remediate-critical-php-flaws/<ul> <li><strong>Platform/SRE — Act:</strong> CVSS 9.2 pre-auth RCE in the PHP engine itself with a vendor-confirmed attack path on Apache/mod_php and no application-level workaround; upgrade every web-serving host or container to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 now (patch released 2026-10-21).</li> <li><strong>CI/CD — Skip</strong></li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> CVE-2026-109618 — CISA KEV: not listed, EPSS 0.12, reported by 2 collected sources · CVE-2026-109619 — CISA KEV: not listed, EPSS 0.06, reported by 2 collected sources</li> </ul>