Skip to content

Advisory: PHP2Shell: the critical PHP vulnerability and how to patch itRead more

Topic

Vulnerabilities

Vulnerabilities and exploitation: CVEs, CVSS scores, exploited-in-the-wild lists and patch priorities.

Covers to 23 Oct 2026Threat intelligence
Exploited in October 2026: Ivanti, Windows, PAN-OS, Cisco and Ahsay lead 26 additions
Critical severity
22 Oct 2026Advisories
PHP2Shell: the critical PHP vulnerability and how to patch it
Critical severity
KEV release 14 Oct 2026Advisories
CISA lists exploited flaws in PAN-OS, Cisco Secure Email Gateway and AhsayCBS
High severity
Patch Tuesday 13 Oct 2026Advisories
Microsoft October 2026 Patch Tuesday: exploited Windows Shell flaw and two public zero-days
High severity
KEV listed 13 Oct 2026Advisories
Ivanti Connect Secure zero-day CVE-2026-104935 exploited in a three-flaw chain
Covers to 30 Sep 2026Threat intelligence
Exploited in August and September 2026: 74 flaws added, from SharePoint to RouterOS

All categories

Advisories
Patch and mitigation notices, each with a severity, its identifiers and one action.
Latest 25 Oct 2026
Threat intelligence
Incidents, campaigns and the monthly exploited-vulnerability roundups.
Latest 25 Oct 2026
Research
Data briefs and analysis drawn from primary statistics.
Latest 25 Oct 2026
Policy and regulation
ASD, Home Affairs, the OAIC, the Privacy Act and the Cyber Security Act.
Latest 25 Oct 2026
Company news
Products, arrangements, certificates and client releases from Black Shard.
Latest 25 Oct 2026
Guides
Reference guides and technical write-ups from our own engagements.
Latest 6 Oct 2026

Want this applied to your systems?

Tell us what you run and what you need checked.

Talk to us Call 1800 370 270