Frequency
2
occurrences
First Seen
April 15, 2026
Last Seen
April 16, 2026
Related Threat Clusters
-
Critical Command Injection Vulnerabilities in Composer's Perforce Driver
Two command injection vulnerabilities, CVE-2026-40176 and CVE-2026-40261, have been identified in Composer's Perforce VCS driver, allowing attackers to execute arbitrary commands on user systems. CVE-2026-40176,…
5 articles · Updated April 15, 2026 -
Critical PHP Composer Vulnerabilities Allow Remote Command Execution
Two high-severity vulnerabilities in PHP Composer, a dependency manager for PHP, have been identified, allowing attackers to execute arbitrary commands. These flaws can be exploited through malicious repository…
3 articles · Updated April 15, 2026
Recent Intelligence Reports
- PHP Composer vulnerabilities allow arbitrary command execution | brief — Scworld · April 16, 2026
- PHP Composer flaws enable remote command execution via Perforce VCS — Securityaffairs.Co · April 15, 2026