Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Blog Series

Log4j vulnerabilities

Log4j Vulnerability Fix: Detect, Patch...

Key Takeaways The Log4j vulnerability fix that holds up in 2026 is a currently maintained log4j-core release, well past 2.17.1. Stopping at 2.15.0 or 2.16.0 in 2021 still leaves you...

Budworm hackers target U.S. organizations...

Notorious cyber espionage group Budworm has launched deliberate attacks against a number of high-profile targets, including a U.S. state legislature, a Middle Eastern country and a multinational electronics manufacturer. The...