Critical9.2VulnerabilityActiveExploitedPatch availableEPSS 100%CVE-2026-109618CVE-2026-109619· updated Nov 13
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
9 results
On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.
According to Military Times, a September 18 notification letter from the Defense Manpower Data Center (DMDC) says it found a vulnerability in a file-sharing system on July 16 and that unauthorized users accessed files with unencrypted personal data on a server between October 2025 and July 16, 2026 .
According to The HIPAA Journal, US dental benefits administrator DentaQuest's network was accessed without authorization between May 17 and 20, 2026; the company says at least 15 million people are affected, with names, addresses, SSNs, Medicaid and Medicare numbers and dental or vision health information involved .
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .
Stryker said a cyberattack on March 11 caused a global disruption to its Microsoft environment, affecting order processing, manufacturing and shipping .
Google Threat Intelligence Group (GTIG) published a report in August 2025 revealing that threat actors used compromised OAuth tokens associated with Salesloft Drift to access Salesforce environments across multiple organizations .
In 2024, Snowflake published guidance on detecting and preventing unauthorized access to customer accounts .
In February 2024, UnitedHealth Group publicly disclosed that its subsidiary Change Healthcare had suffered a cyberattack, disrupting related healthcare claims and payment services .
On 2024-02-07, CISA, NSA, and the FBI issued a joint advisory attributing confirmed intrusions into U.