Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV.

Related Posts:

• This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days
• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report
• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)

The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV appeared first on Daily CyberSecurity.

Horizon3 released details and a PoC for CVE-2026-106173, a FortiSIEM vulnerability enabling unauthenticated remote code execution. Patch now.

Related Posts:

• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
• Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates

The post FortiSIEM Vulnerability Details and PoC Exploit Released for Critical Unauthenticated RCE Flaw appeared first on Daily CyberSecurity.