Threats tagged 'welotec-gmbh'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	KEVMirageEPSS 99%	CVE-2026-109618Welotec: PHP2Shell Vulnerabilities Critical9.2KEVMirageEPSS 99%2026-10-29GCVE DatabaseCVE-2026-109618 Two memory-safety vulnerabilities in the PHP runtime bundled with Welotec's SMART EMS product up to version 3.5.3 allow unauthenticated remote attackers to execute arbitrary code in the PHP web worker context. Exploitability depends on server interface, configuration, application behavior, and worker reuse. Public exploit code is available. KEVMirageEPSS 99%Report on CVE-2026-109618 Vulnerability CWE-416	GCVE Database	2026-10-29

Page 1 of 1