Wave of Critical Flaws Hits PHP, Node, GitLab and LiteLLM
Security researchers warn of an unusual wave of critical flaws—two actively exploited PHP RCEs, plus issues in Node.js, GitLab and a backdoor in LiteLLM—that may persist for the next eight months, urging immediate patching.
2026-10-22 ~ 2026-10-22 · 3 related posts
- Episode 1: AI Helps Uncover Critical PHP Flaw Affecting ~70% of Websites(2026-10-21, 68 posts)
- Episode 2: Researchers Predict LLM Audits Will Uncover More PHP Vulnerabilities(2026-10-21, 3 posts)
- Episode 3: PHP RCE proof-of-concept confirmed working, but not one-click(2026-10-21, 2 posts)
- Episode 4: POC Released for Critical Pre-Auth RCE in PHP session.upload_progress(2026-10-21, 2 posts)
- Episode 5: PHP 8.5.12 Patch Incomplete: php2shell Double-Free Still Exploitable(2026-10-22, 2 posts)
- Episode 6: NSA Issues Rare Urgent Directive: Patch Critical PHP Flaws or Go Offline(2026-10-22, 2 posts)
- Episode 7: NCSC urges immediate patching as AI-discovered PHP flaw details leak(2026-10-22, 2 posts)
- Episode 8: Wave of Critical Flaws Hits PHP, Node, GitLab and LiteLLM(2026-10-22, 3 posts)
- LiteLLM v1.107.0 backdoored, PHP RCEs exploited: a nightmare day for open-source security — aniketmaurya · 2026-10-22
- "Captain, it's Wednesday": PHP, GitLab, LiteLLM security incidents pile up — HanchungLee · 2026-10-22
- Security researchers warn simultaneous PHP/GitLab vulns make next 8 months 'continuous hell' — joshua_saxe · 2026-10-22