Black October
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Several security incidents in the week of 17 October 2026 have been grouped as "Black October." The most prominent are PHP2Shell, two PHP flaws (CVE-2026-109618 and CVE-2026-109619) that Wiz found with AI assistance and used to demonstrate unauthenticated code execution on WordPress, Drupal and Joomla. Fixes are in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12. LiteLLM 1.107.0 was briefly published to PyPI with credential-stealing code, so teams should rotate secrets. eMudhra's weak CA keys were reported but not independently verified.