NSA advierte sobre vulnerabilidades críticas de PHP; parches emitidos tras hallazgo de IA

NSA advierte sobre vulnerabilidades críticas de PHP; parches emitidos tras hallazgo de IA

Seguridad Tecnología
Inicia sesión para fijar este evento

El 21 de octubre, la Agencia de Seguridad Nacional de EE.  UU. advirtió que se habían descubierto dos vulnerabilidades críticas de PHP, presentes desde 2004, con la ayuda de herramientas de inteligencia artificial, y que ya se habían lanzado parches de emergencia.

El PHP Foundation había programado y luego publicado actualizaciones de emergencia para todas las versiones soportadas, incluidas,, y, que corrigen las fallas de ejecución remota de código identificadas como CVE-2026-109618 y CVE-2026-109619. Los parches se prepararon después de que se filtraran detalles de las vulnerabilidades antes de la divulgación planificada.

Actores

PHP security team WatchTowr security researcher Benjamin Harris

Ubicaciones

Sin registros

Verificación de hechos

Cómo funcionan estas métricas
Veredicto general: Parcialmente confirmado Confianza: 56% Afirmaciones: 1
Resumen

The claim that the PHP development team planned to release emergency security updates on October 21, 2026 to fix two high-severity remote code execution vulnerabilities was partially confirmed.

Inicia sesión o suscríbete para ver el análisis completo con afirmaciones, fuentes y validación cronológica.

Registrarse Iniciar sesión

Esta sección contiene una verificación automatizada de afirmaciones con fuentes externas y puede incluir imprecisiones.

Artículos

21 de octubre de 2026
6 en total
PHP armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet
PHP armageddon: OpenAI, Google's Wiz find ancient holes, panicking the internet

TechCrunch • 21 de oct 17:59

The U.S. National Security Agency warned of two severe PHP flaws dating back to 2004, for which patches have been released, and highlighted the role of AI tools in uncovering them.

Credibilidad 72% Manip. 24% Centro
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

WIRED • 21 de oct 14:26

The PHP Foundation issued emergency updates for two critical flaws, CVE-2026-109618 and CVE-2026-109619, urging immediate patching to prevent widespread exploitation.

Credibilidad 78% Manip. 9% Centro
PHP2Shell: Critical PHP vulnerabilities patched, update now!
PHP2Shell: Critical PHP vulnerabilities patched, update now!

Help Net Security • 21 de oct 13:51

The PHP development team has released emergency updates for PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to address two critical remote code execution vulnerabilities, urging users to upgrade immediately.

Credibilidad 78% Manip. 8% Centro
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't

The Hacker News • 21 de oct 10:36

PHP will issue fixes for two high-severity flaws on October 21, and security researchers say disabling the session upload progress feature is not a sufficient mitigation.

Credibilidad 72% Manip. 8% Centro
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patch
Critical PHP Vulnerabilities Leaked Ahead of Scheduled Security Patch

Infosecurity Magazine • 21 de oct 10:20

Two high-severity PHP flaws were disclosed a day before the planned release, prompting the PHP project and European cyber authorities to urge immediate remediation.

Credibilidad 72% Manip. 7% Centro
PHP warns it plans to release 2 emergency patches imminently
PHP warns it plans to release 2 emergency patches imminently

Ars Technica • 21 de oct 02:12

The PHP development team announced emergency updates for two high-severity flaws, urging administrators to prepare for deployment within the next 12 hours.

Credibilidad 71% Manip. 8% Centro
20 de octubre de 2026
1 en total
PHP warns admins of two critical flaws, emergency patches coming tomorrow
PHP warns admins of two critical flaws, emergency patches coming tomorrow

BleepingComputer • 20 de oct 20:56

The PHP development team will release emergency security updates on October 21 to fix two high-severity remote code execution vulnerabilities after details were leaked ahead of the planned disclosure.

Credibilidad 78% Manip. 8% Centro

Eventos relacionados