Latest Cybersecurity News and IT Security Insights
Stay informed about emerging threats, practical protection strategies and innovations in vulnerability management. Benefit from the expertise of the Greenbone specialists and strengthen your IT security.
Subscribe to the Newsletter Now
Emergency Patch! PHP2Shell Opens PHP Servers to Remote Code Execution
Blog●Developing Story Status: In progress. This post was last updated on October 21st 2026. We will update it as new information becomes available. PHP has released fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, dubbed PHP2Shell by researchers. Every supported PHP installation should be updated today. According to PHP, both flaws can allow unauthenticated remote […]
CVE-2026-102764: BeyondTrust RS Actively Exploited
BlogCVE-2026-102764 (CVSS 9.3, EPSS ≥ 67th pct) is a critical authentication-bypass flaw affecting BeyondTrust Remote Support (RS). The vulnerability stems from improper origin validation in an internal messaging component, and exploitation allows an unauthenticated remote attacker to perform file operations on an affected appliance. The CVE was published on October 15th, 2026, and added to […]
CVE-2026-21589: Multiple Atlassian Data Center Products Actively Exploited
BlogCVE-2026-21589 (CVSS 9.3, EPSS ≥ 78th pctl) is a critical-severity arbitrary file access vulnerability [CWE-552] affecting Atlassian Jira Service Management Data Center, Jira Software Data Center, Confluence Data Center, Bitbucket Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. All unpatched versions of the affected products are vulnerable. The file access vulnerability can […]