国家网络安全通报中心发布PHP远程代码执行高危漏洞预警

智通财经
Yesterday
【国家网络安全通报中心发布PHP远程代码执行高危漏洞预警】据国家网络安全通报中心,近日,PHP曝出两个严重安全漏洞,漏洞编号为CVE-2026-109618、CVE-2026-109619。该漏洞可导致未经身份验证的远程攻击者通过发送特制POST请求,触发内存破坏并最终实现远程代码执行,从而获取服务器控制权限。漏洞影响PHP 8.5.x<8.5.12、PHP 8.4.x<8.4.27、PHP 8.3.x<8.3.36、PHP 8.2.x<8.2.35以及8.1以前版本。由于漏洞危害严重,已导致多国网站大规模紧急下线。PHP作为一种开源编程语言,广泛应用于WordPress、Drupal、Joomla和Magento等网站平台开发。目前,PHP官方已发布最新版本修复该漏洞,详见,建议受影响用户及时更新至安全版本,消除安全隐患,严防发生网络攻击事件。

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Most Discussed

  1. 1
     
     
     
     
  2. 2
     
     
     
     
  3. 3
     
     
     
     
  4. 4
     
     
     
     
  5. 5
     
     
     
     
  6. 6
     
     
     
     
  7. 7
     
     
     
     
  8. 8
     
     
     
     
  9. 9
     
     
     
     
  10. 10