watchTowr on Nostr: We were all supposed to wait until Thursday at 11am ET. Information has leaked wrt ...
We were all supposed to wait until Thursday at 11am ET.
Information has leaked wrt zero-day embargoed RCE vulns in PHP. We can confirm that they're real. CVE-2026-109618/619
We cannot share further information right now. Take this seriously and apply patches when available.
Published at
2026-10-20 18:27:06 UTCEvent JSON
{
"id": "3c0e1f2ea31362dabf153a5d7644d671812659d66ef4930bec7a8bb9fe593e78",
"pubkey": "8b267708b506c2d3eeb1557ff62fa0ca0a627d4a02eb40a4b8a30cdcf65f9ad6",
"created_at": 1792520826,
"kind": 1,
"tags": [
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/474/644/418/440/060/original/75e5c8a895112687.png",
"m image/png"
],
[
"proxy",
"https://infosec.exchange/@watchTowr/117474644870827640",
"web"
],
[
"proxy",
"https://infosec.exchange/users/watchTowr/statuses/117474644870827640",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/watchTowr/statuses/117474644870827640",
"pink.momostr"
],
[
"-"
]
],
"content": "We were all supposed to wait until Thursday at 11am ET. \n\nInformation has leaked wrt zero-day embargoed RCE vulns in PHP. We can confirm that they're real. CVE-2026-109618/619\n\nWe cannot share further information right now. Take this seriously and apply patches when available.\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/117/474/644/418/440/060/original/75e5c8a895112687.png\n",
"sig": "d77b2524345cea7aad5a5f32a23959d1f0c0b3c72e1193f04b9005faea74a55df7995b44e313f612a43ef53cebdf270e9e1e1dc416f48730094bdd3ecdfc3065"
}
