Index

All dossiers

Every published dossier and chain dossier. Filter by exploitation status or vendor.

StatusAll Active exploitation PoC public Patched, monitoring Archived

VendorAll Adobe BerriAI BeyondTrust Cisco Citrix Collabora Drupal GitLab Ivanti Linux Node.js (Google Brotli)PHP Group SonicWall WordPress

Dossiers

No dossiers match these filters.

Chain dossiers

CVE-2026-109619, CVE-2026-109618CRITICAL

PHP2Shell: unauthenticated RCE in PHP web SAPIs (CVE-2026-109618, CVE-2026-109619)

Two critical PHP request-handling bugs allow unauthenticated RCE; in KEV and exploited against PAN-OS management interfaces, chained with Fragnesia for root.

Updated 2026-11-09