INCIBE-CERT warns of two critical PHP flaws allowing remote code execution affecting QNAP, Synology, Mitel and Palo Alto Networks

TechnologyInternationalMONCLOA.COMOct 24, 2026, 2:43 PM35 s readAI summary

INCIBE-CERT published advisory INCIBE-2026-778 on two critical PHP vulnerabilities, grouped as PHP2Shell, that allow remote code execution by an unauthenticated attacker. The flaws, CVE-2026-109618 and CVE-2026-109619, carry a severity of 5 out of 5 and affect products from QNAP, Synology, Mitel, Tenable and Palo Alto Networks. QNAP has not yet announced fixed versions; the advisory calls for applying updates when available and, in the meantime, containment measures.

In 35 seconds

Two PHP CVEs (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated remote code execution, with a severity of 5 out of 5.
Advisory INCIBE-2026-778 cites impact on QNAP, Synology, Mitel, Tenable and Palo Alto Networks.
QNAP published its own advisory (QSA-26-18) but has not announced fixed versions.

Read the full story at MONCLOA.COM

IASummary generated by artificial intelligence from a story by MONCLOA.COM. It may contain errors: the original source prevails.

ciberseguridad
vulnerabilidades
PHP
QNAP
INCIBE-CERT

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

Keep reading

Dan Driscoll, former US Army secretary, joins OpenAI as senior national security advisor
OpenAI will bring on Dan Driscoll, former secretary of the US Army, as senior national security advisor, a newly created role. According to the company, his job will be to advise on how advanced AI can strengthen the national and cybersecurity of the United States and its allies. Driscoll resigned from the Army in September after reports of tensions with Defense Secretary Pete Hegseth. The appointment comes amid international concerns over the risks of advanced AI models.
TechnologyInternationalRevista SemanaNov 3AI
Emcali selected the consortium that will modernize more than 100,000 streetlights in Cali with LED technology
Cali will have 100% of its public lighting with LED technology through a COP 450,000 million project that includes modernizing 101,037 lights and installing 3,945 new points, with an 18-month execution period and operation and maintenance of up to 20 years. Emcali reported that three bidders submitted proposals and that works would begin with resources from the strategic partner, with disbursements only against effective execution. The model includes telemanagement, at an estimated COP 121,000 million, and would not require new debt for the city.
TechnologyColombiaBlu RadioNov 3AI
Cartagena Chamber of Commerce kicks off InnovaLatam 2026 with AI and leadership as core themes
The Cartagena Chamber of Commerce, iXcel Center, the Global Innovation Management Institute and Colsubsidio are organizing the seventh edition of InnovaLatam, which begins on Thursday, November 5, at the Hotel Estelar. The agenda is built around four pillars: Innovation 5.0 with artificial intelligence, Augmented Talent, Exponential Leadership and the Knowledge Triad. The event includes a free academic agenda, a commercial showcase of local business clusters and a Business Tour on November 6 with international delegations and investment funds.
TechnologyColombiaEl TiempoNov 3AI
Colombian election platform Comitium receives recognition in the United States
The organization Transparencia Electoral highlighted in Miami the development of Comitium, a platform created by LinkTIC and implemented by the National Electoral Council (CNE) to monitor the 2026 elections. The recognition was presented at the VI Transparencia Electoral Awards, within the framework of the US Electoral Program 2026, with more than 100 electoral authorities from 15 countries. Comitium managed more than 1.6 million accreditations of electoral witnesses, nearly 12,800 systems auditors and more than 40,000 national and international observers.
TechnologyColombiaBlu RadioNov 3AI

INCIBE-CERT warns of two critical PHP flaws allowing remote code execution affecting QNAP, Synology, Mitel and Palo Alto Networks

In 35 seconds

Comments

Keep reading

Dan Driscoll, former US Army secretary, joins OpenAI as senior national security advisor

Emcali selected the consortium that will modernize more than 100,000 streetlights in Cali with LED technology

Cartagena Chamber of Commerce kicks off InnovaLatam 2026 with AI and leadership as core themes

Colombian election platform Comitium receives recognition in the United States