https://curadevops.metacog.co.kr/tags/php2shell/Recent content in Php2shell on CuraDevOpsHugoen-usFri, 23 Oct 2026 15:33:11 +0000https://curadevops.metacog.co.kr/insights/2026-10-23-security-update-on-php2shell-impact-for-docker-customers/Fri, 23 Oct 2026 15:33:11 +0000https://curadevops.metacog.co.kr/insights/2026-10-23-security-update-on-php2shell-impact-for-docker-customers/<ul> <li><strong>Platform/SRE — Skip</strong></li> <li><strong>CI/CD — Plan:</strong> Two critical PHP CVEs affect Docker images built on PHP; audit pipelines for PHP-based container images and update base images to patched PHP versions. Neither CVE is KEV-listed and EPSS scores are low (0.12/0.06), so no emergency, but schedule the base-image refresh this sprint.</li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> CVE-2026-109618 — CISA KEV: not listed, EPSS 0.12, reported by 2 collected sources · CVE-2026-109619 — CISA KEV: not listed, EPSS 0.06, reported by 2 collected sources</li> </ul>