https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T07:48:04.128460+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-11043 CVE-2019-11043 — Underflow in PHP-FPM can lead to RCE 2026-10-10T07:48:04.198102+00:00

Affected: PHP

In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.

 https://cve.radiocsirt.org/vuln/usn-4166-1 USN-4166-1 — php7.0, php7.2, php7.3 vulnerability 2026-10-10T07:48:04.198203+00:00

Affected: Ubuntu:16.04:LTS: php7.0, Ubuntu:18.04:LTS: php7.2

It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issue to execute arbitrary code.