Research

26th October – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 26th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japanese cloud hosting provider Onamae Desktop Cloud has confirmed a cyberattack in which intruders compromised its infrastructure and installed malware on customer servers. More than 26,000 servers were potentially affected. The provider […] The post 26th October – Threat Intelligence Report appeared first on Check Point Research .

Read at Check Point Research

EPSS

1.00 (p100)

• Check Point Research (research.checkpoint.com)
• CVE-2026-109618 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-109619 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-115560 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-110264 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-114625 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 79
   Tenable research Tenable 2d ago

   php2shell one week later: Why one exploit doesn’t work everywhere

   Exploited CVSS 9.2 EPSS 0.16 Fix available CVE-2026-109618CVE-2026-109619CVE-2021-44228+1 more PHP
2. 31
   News The Register 2d ago

   Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

   EPSS 0.16 CVE-2026-109618CVE-2026-109619CVE-2026-46300 PHP
3. 58
   Research Censys 2d ago

   Censys takes census of the Internet like no one else

   CVSS 9.2 EPSS 1.00 CVE-2026-109618CVE-2026-109619 PHP
4. 61
   News The Register 4d ago

   CISA confirms PHP2Shell under attack as researchers clock successful exploits

   Exploited EPSS 1.00 CVE-2026-109618CVE-2026-109619 PHP
5. 36
   Research Cloudflare 4d ago

   Introducing the Cloudflare PHP Capture the Flag challenge

   EPSS 1.00 CVE-2026-109618CVE-2026-109619 Cloudflare
6. 41
   Tenable research Tenable 5d ago

   Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)

   EPSS 1.00 Fix available CVE-2026-111497CVE-2026-109618CVE-2026-109619 Google Node.js
7. 36
   Tenable research Tenable 5d ago

   Discover and remediate PHP2Shell exposure with Tenable

   EPSS 1.00 No fix yet CVE-2026-109618CVE-2026-109619 Tenable PHP
8. 38
   ESET research ESET 5d ago

   PHP2Shell: What to know about two critical PHP flaws

   EPSS 1.00 CVE-2026-109618CVE-2026-109619 PHP
9. 64
   CISA alert CISA 5d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   Exploited EPSS 1.00 CVE-2026-109618CVE-2026-109619
10. 36
    News The Register 6d ago

    PHP2Shell: No login, no app code, no warning. What next?

    EPSS 1.00 CVE-2026-109618CVE-2026-109619 PHP
11. 41
    Qualys TRU Qualys 6d ago

    Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own

    EPSS 1.00 Fix available CVE-2026-109618CVE-2026-109619 Qualys PHP
12. 35
    Palo Alto advisory Palo Alto PSIRT 7d ago

    Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    EPSS 1.00 CVE-2026-109618CVE-2026-109619 Palo Alto Networks
13. 51
    Google Cloud bulletin Google Cloud 8d ago

    GCP-2026-074

    EPSS 1.00 Fix available CVE-2026-93327CVE-2026-85299CVE-2026-109618+1 more Google
14. 46
    Cisco advisory Cisco PSIRT 8d ago

    Vulnerabilities in PHP Affecting Cisco Products: October 2026

    EPSS 1.00 CVE-2026-109618CVE-2026-109619 Cisco PHP
15. 34
    News The Register 8d ago

    There's a third PHP2Shell bug, but it won't get an emergency fix

    EPSS 1.00 CVE-2026-115560CVE-2026-109618CVE-2026-109619 PHP
16. 31
    Research Unit 42 8d ago

    Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 29)

    EPSS 1.00 CVE-2026-109618CVE-2026-109619
17. 22
    CCCS advisory CCCS 8d ago

    Arista Networks security advisory (AV26-1080)

    CVE-2026-114625 Arista Networks
18. 34
    Research Horizon3 8d ago

    CVE-2026-109618 / CVE-2026-109619

    EPSS 1.00 CVE-2026-109618CVE-2026-109619 PHP
19. 37
    CCCS advisory CCCS 8d ago

    AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619

    EPSS 1.00 CVE-2026-109618CVE-2026-109619CVE-2026-115560
20. 50
    Docker security Docker 8d ago

    PHP2Shell and eMudhra Patched

    EPSS 1.00 CVE-2026-109618CVE-2026-109619 Docker PHP