DampSnag

Tag

#security

Vulnerabilities, patches and how to keep your systems safe.

  1. PHP2Shell: Update PHP Now, Then Check That Your Web Server Is Actually Using It

    Two critical PHP bugs, CVE-2026-109618 and CVE-2026-109619, can let an attacker run code on your server without logging in. Fixes are out and attacks have started. Here's what's affected, how to check the PHP your web server really runs, and how to update common self-hosted setups.

    #security #self-hosting #php

  2. Patch Your GitLab Again: CVE-2026-110264 Is a 10.0, and Your October Update Didn't Cover It

    GitLab just fixed an unauthenticated remote code execution bug that goes all the way back to version 7.0. If you self-host, including if you patched on 12 October, here's what it is, how to check your version, the exact upgrade to grab, and what to look for in your logs.

    #security #self-hosting #gitlab