Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619

PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619

Critical remote code execution vulnerabilities in PHP core sessions have leaked ahead of scheduled patching, affecting versions 5 through 8.

avatar
Mateus Dornelas@salenrod11 hours ago

2 intel reports

FortiBleed Campaign Exploits Fortinet Devices for Ransomware

Russian-speaking threat actors are exploiting CVE-2026-35616 in FortiClient EMS to deploy EKZ Stealer and FortigateSniffer, facilitating credential harvesting and subsequent ransomware attacks by INC Ransom and Lynx.

avatar
Tim Peck@timpeck
4 months ago
62
Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451

A pre-authentication memory overread vulnerability (CVE-2026-8451) in Citrix NetScaler appliances configured as SAML IdPs allows for information leakage and denial of service.

avatar
J S@jsh0x
4 months ago
24