Security1 hOctober 22, 2026, 23:41

Black October: PHP2Shell, SBI leak and weak eMudhra CA keys

A roundup of incidents within 72 hours: critical PHP RCE flaws (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2), a State Bank of India data leak (3,897 records confirmed, 375,000 listed on a dark web marketplace), eight compromised eMudhra intermediate CA keys, a 3.2 million-record Zeabur breach and a malicious LiteLLM 1.107.0 package.

DEV Community

Open source

Black October: PHP2Shell, SBI leak and weak eMudhra CA keys

PHP flaws rated CVSS 9.2 are exploited in the wild with a ~450-byte payload
SBI confirmed 3,897 records while 375,000 were listed on a marketplace
eMudhra keys were live since April 2025; one private key was the number 4
Malicious LiteLLM 1.107.0 stayed on PyPI and Docker Hub for about 2 hours

#PHP#LiteLLM#EMudhra#Zeabur

Eight eMudhra intermediate CA keys compromised

Security

eMudhra blames key ceremony flaw for laughably weak private keys

Security

October 2026 security incidents: LiteLLM, eMudhra, Hetzner and Andromeda remediated

Security

Black October: PHP2Shell, SBI leak and weak eMudhra CA keys

Eight eMudhra intermediate CA keys compromised

eMudhra blames key ceremony flaw for laughably weak private keys

October 2026 security incidents: LiteLLM, eMudhra, Hetzner and Andromeda remediated

PHP, Node.js and LiteLLM flaws take down government sites