[MEGATHREAD] PHP2Shell (CVE-2026-109618/109619), LiteLLM, eMudhra, GitLab & Other October Security Incidents AKA Black October We've been getting hammered with posts and questions about the wave of vulnerabilities, compromises, and other security incidents over the past week. A lot are duplicative, and there is a wave of vibe coded crap getting shared that doesn't really do much in this situation. Rather than having a 3 dozen threads covering the same thing, we're going to consolidate the general discussion. There's a lot happening, and some of it more serious than others. There's also a fair amount of speculation and outright BS getting mixed in with legitimate reporting. For anyone trying to catch up, here are the most significant incidents / vulns and links to official sources. We'll add more as needed. What's going on? PHP2Shell (CVE-2026-109618 / CVE-2026-109619) Critical PHP vulnerabilities with reported exploitation attempts predating public disclosure. Emergency security updates were released October 21. PHP official releases CISA advisory LiteLLM supply chain compromise Malicious packages published through PyPI and container registries. Potential credential theft and remote code execution. LiteLLM official incident report eMudhra certificate authority compromise Compromised certificate infrastructure created the potential for forged trusted certificates. Google and Mozilla have both published responses. Google security response Mozilla security response GitLab critical vulnerabilities Emergency security updates for affected self-managed GitLab installations. GitLab security release Railway and Zeabur security incidents Both platforms have disclosed security incidents affecting their infrastructure and services. Railway security disclosure Zeabur incident report Other useful resources CISA Known Exploited Vulnerabilities Catalog NIST National Vulnerability Database CISA Cybersecurity Advisories A few things worth mentioning If you have new research, technical findings, or a significant development, feel free to create a separate post. Otherwise, please keep chatter and questions here. Please link original sources when possible. We're particularly interested in technical findings, incident reports, and official advisories rather than another article summarizing someone else's reporting. If we've missed something significant, drop it in the comments with a source and we'll update the thread. Last updated: October 23, 2026.   submitted by   /u/thejournalizer [link]   [comments]