Overview Recently, NSFOCUS CERT monitored that Linux released a security update to fix the Linux Kernel IPv4 TCP use-after-free vulnerability (CVE-2026-98432). Due to a race condition issue in the Linux kernel IPv4 network subsystem when concurrently handling TCP connection requests or socket migration, an unauthenticated attacker can trigger a use-after-free...
Categoria: Emergency Response
PHP Remote Code Execution Vulnerability (CVE-2026-109618 / CVE-2026-109619) Advisory
Overview Recently, NSFOCUS CERT monitored the public disclosure of PHP Remote Code Execution (RCE) vulnerabilities (CVE-2026-109618 / CVE-2026-109619). Due to memory management flaws in PHP Core—where longjmp() handles Out-Of-Memory (OOM) errors leading to failed memory allocations, as well as various global state handling operations—a Use-After-Free (UAF) condition can occur. Unauthenticated...
GitLab Remote Code Execution Vulnerability (CVE-2026-97229) Notice
Overview Recently, NSFOCUS CERT monitored that GitLab released a security update to fix the GitLab Remote Code Execution Vulnerability (CVE-2026-97229). Due to insufficient validation of regular expressions in GitLab's CI/CD configuration, unauthenticated attackers can construct special regular expressions within the CI/CD configuration to trigger an integer overflow during compilation, thereby...
Microsoft’s August Security Update of High-Risk Vulnerability Notice for Multiple Products
Overview On August 12, NSFOCUS CERT monitored that Microsoft released its August security update patch, fixing 421 security issues. These affect widely used products such as Windows, Microsoft Office, Azure, Visual Studio Code, Microsoft Exchange Server, etc., which include high-risk vulnerability types such as privilege escalation and remote code execution....
Fastjson 2.x Remote Code Execution Vulnerability Notice
Overview Recently, NSFOCUS CERT detected that a Fastjson 2.x remote code execution vulnerability was disclosed online; Because Fastjson2.x may still handle @type in JSON through the built-in whitelist when SupportAutoType is not enabled by default configuration, an unauthenticated attacker can construct specially crafted malicious JSON data and achieve remote code...
Fastjson 1.2.x Remote Code Execution Without Gadget Vulnerability Notice
Overview Recently, NSFOCUS CERT detected that a Fastjson 1.2.x remote code execution vulnerability without gadget was disclosed online; Due to the defects in the internal type parsing logic of Fastjson deserialization, unauthenticated attackers can construct specially crafted malicious JSON data to bypass the traditional autoType black and white list protection...
