Skip to content

CVE-2025-23266

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 24, 2025
Last Seen
October 23, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, allowing unauthenticated remote code execution (RCE). The vulnerabilities, collectively known as PHP2Shell, affect all PHP installations serving web requests, including popular pl...

SUSE and openSUSE have released an update for the nvidia-container-toolkit, addressing critical data tampering and privilege escalation issues. The update to version 1.18.0 includes significant changes, such as the default mode of the NVIDIA Container Runtime utilizing a just-in-time-generated CDI s...

SUSE and openSUSE have released an update for the nvidia-container-toolkit, addressing critical issues including data tampering and privilege escalation. The update, version 1.18.0, introduces a new default mode for the NVIDIA Container Runtime that utilizes a just-in-time-generated CDI specificatio...

Public Exploits

Checking GitHub for proof-of-concept code…