Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"

Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page lv/news/jauns/raksts-zinas-735243-atklata-jauna-un-loti-specifiskos-apstak, snapshot 20261027T144120Z. Copied byte for byte; every file's sha256 is in captures/20261027T144120Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Jauns.lv (Latvia, Latvian), 27 October: CERT.LV warns that a new PHP vulnerability, discovered on Monday 26 October, can be exploited only in very specific circumstances with a specific system configuration, so the PHP team plans to publish its patch with the other scheduled updates and no emergency patch is planned. CERT.LV says the two critical PHP2Shell flaws were fixed by the patch of 21 October, that many resource holders suspended or restricted services in advance, that public-sector websites are almost fully restored (the latvija.lv portal and the shared web platform are available from abroad, and most resources were reachable from abroad by Monday evening), and that no successful cyberattacks exploiting the critical flaws have been recorded so far, though attacker activity may rise and tools may improve. Its checks of Latvian cyberspace found about 6,000 potentially vulnerable resources, only a few hundred in the public sector, and it has informed private-sector operators of essential services, critical infrastructure, hosting and telecom providers; it calls the handling process successful and tells operators to check with their system maintainer or developer and not to use downloadable 'diagnostic' tools found online, since attackers use high-profile events to push fake tools. The article's date for the new flaw (26 October) differs from other items that date the PHP project's advisory on the related flaw to 23 October.

> Pagaidām nav konstatēti veiksmīgi kiberuzbrukumi, kuros uzbrucēji būtu izmantojuši kritiskās PHP ievainojamības

_Curator's translation:_ "So far no successful cyberattacks have been recorded in which attackers used the critical PHP vulnerabilities."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"". Selected mechanically, not read by a person.

Capture notes

Language lv. Nothing in the page addresses an AI or hides text from a reader.