[Security Advisory] Out-of-Band Critical JSSE Vulnerability in Oracle Java SE, GraalVM & OpenJDK (CVE-2026-91403, CVSS 9.1): Fix Guide

Advisory ID: LUCKVM-SA-2026-1022-JAVA Severity: Critical — CVSS v3.1 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Identifiers: CVE-2026-91403 (Red Hat Bugzilla #2558584 / OpenJDK Advisory 2026-1...

LuckVM Security Center·2026-10-23

[Security Advisory Update] Official Patches Released for Critical PHP "PHP2Shell" RCE Vulnerabilities (CVE-2026-109618 & CVE-2026-109619, CVSS 9.2)

Advisory ID: LUCKVM-SA-2026-1022 (Update to LUCKVM-SA-2026-1021) Last Updated: October 22, 2026 Severity: Critical — CVSS v4.0 9.

LuckVM Security Center·2026-10-22

[Security Advisory] Critical PHP Core RCE Vulnerabilities (CVE-2026-109618 & CVE-2026-109619 / "php2shell", CVSS 9.2) — Impact & Remediation Plan

Advisory ID: LUCKVM-SA-2026-1021 Published: October 21, 2026 Severity: Critical — CVSS v4.0 9.2 Identifiers: CVE-2026-109618, CVE-2026-109619 (Referred to as php2shell) 1.

LuckVM Security Center·2026-10-21