Posts tagged cra

Posts on the Pentr blog tagged cra.

A terminal on a PHP host: php -v still reports 8.2.29, and grepping the package changelog for CVE-2026-109618 and CVE-2026-109619 returns both, highlighted

22 October 2026

PHP2Shell: what CVE-2026-109618 and CVE-2026-109619 are, and how to confirm you're fixed

Two unauthenticated remote code execution bugs in the PHP interpreter, exploited before the fix shipped. What they are, how to patch, and how to confirm the fix on each host.

vulnerabilities
cra

A timeline from 11 September 2026, when reporting applies, to 11 December 2027, with the Article 14 deadlines of 24 hours, 72 hours and 14 days drawn as a bar

7 October 2026

CRA reporting is live. Know your exposure before the clock starts

CRA Article 14 reporting has applied since 11 September. What it asks, what it does not, and why the work starts before the 24-hour clock does.

cra
compliance