Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical heap use-after-free vulnerabilities in the PHP core allow unauthenticated remote code execution and memory disclosure targeting web servers globally.

avatar
Mateus Dornelas@salenrod8 hours ago

1 intel report

CVE-2026-33824 Windows IKE Extension Pre-Auth RCE

A Chinese-speaking threat actor is manually exploiting CVE-2026-33824, a critical double-free vulnerability in the Windows IKE Extension, to achieve pre-authentication remote code execution on VPN gateways.

avatar
Tim Peck@timpeck
2 months ago
19