Security on Rohamhttps://justroham.ir/tags/security/Recent content in Security on RohamHugo -- 0.153.3enMon, 26 Oct 2026 08:00:00 +0330Go Blocks Eight eMudhra Intermediates: CVE-2026-111943 and Why You Must Rebuildhttps://justroham.ir/posts/go-x509-emudhra-distrusted-intermediates-cve-2026-111943/Mon, 26 Oct 2026 08:00:00 +0330https://justroham.ir/posts/go-x509-emudhra-distrusted-intermediates-cve-2026-111943/Go 1.26.10 and 1.27.3 block eight compromised eMudhra (emSign) intermediates in crypto/x509. What the fix does, why old binaries stay exposed, how to checkCritical GitLab Flaw (CVSS 10): Unauthenticated RCE, CVE-2026-110264https://justroham.ir/posts/gitlab-critical-rce-cve-2026-110264/Fri, 23 Oct 2026 10:00:00 +0330https://justroham.ir/posts/gitlab-critical-rce-cve-2026-110264/CVE-2026-110264 in GitLab CE/EE scores 10 out of 10 and can lead to unauthenticated code execution. Affected and fixed versions, plus what to do right now.Critical PHP RCE Vulnerability: CVE-2026-109618https://justroham.ir/posts/php-critical-rce-cve-2026-109618/Thu, 22 Oct 2026 10:00:00 +0330https://justroham.ir/posts/php-critical-rce-cve-2026-109618/NCSC alert on two critical PHP vulnerabilities (CVSS 9.2, CVE-2026-109618 and CVE-2026-109619): affected and fixed versions, plus what to do right now.