Skip to content
CyberHunter
Tools
News
API
About
Open the app
For agents & integrations
CyberHunter API docs
This page exposes machine-readable API discovery links for agents and integrations.
GET
OpenAPI description
/openapi.json
GET
API catalog (linkset)
/.well-known/api-catalog
GET
Health endpoint
/api/health
Latest vulnerability news
All news
→
Critical 9.2
24 Oct 2026
Video
PHP2Shell: two flaws in the PHP engine allow unauthenticated remote code execution
CVE-2026-109618 and CVE-2026-109619 hit the core of PHP, before any application code runs. Exploited before disclosure, patched on 21 October in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
CVE-2026-109618 · CVE-2026-109619