Skip to content

Advisories Active incidents Threat map Academy Services Solutions

Expert help Subscribe

Search advisories

Plain-language security advisories for IT teams in Taiwan: what happened, how it developed, and how to fix it. Every sentence is sourced.

Browse

Advisories
Active incidents
Academy
Search
Services
Solutions
Expert help

Data & reports

Threat map
Company filings
Taiwan disclosure report
Glossary

Policies

Methodology
Corrections policy
Disclaimer
Privacy
Terms
security.txt

Stay updated

Email alerts
RSS
Atom
JSON Feed

This site aggregates public information and is not security consulting advice. Test remediation steps before applying.

© 2026 資安通報

Keyword, CVE, vendor, product…

Exploitation

Exploited only1

Type

Incident1

Severity

Critical1

Category

Vulnerability1

Status

Active1

Region

East Asia1
North America1

Country

Japan1
Taiwan1
United States1

Industry

Government1
Cross-industry1

Domain

Network appliances1
Web applications1

Vendor

PHP1

Technology

Web server / framework1

Impact

No confirmed impact1

Vulnerability status

Patch available1

Language / package ecosystem

PHP (Composer)1

RSS for this query Subscribe to this query Clear

1 results

▲Critical9.2VulnerabilityActiveExploitedPatch availableEPSS 100%CVE-2026-109618CVE-2026-109619Oct 17, 2026· updated Nov 6

On October 21, PHP released security updates patching CVE-2026-109618 and CVE-2026-109619, two vulnerabilities with CVSS v4.

PHP2Shell: Two Unauthenticated Remote Code Execution Vulnerabilities in PHP (CVSS 9.2); MODA Estimates ~28,000 Websites Affected in Taiwan