'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

RULE（RULE ID：346484）

Rule General Information
Release Date: 2026-10-22
Rule Name: PHP Core Remote Code Execution Vulnerability (CVE-2026-109618 CVE-2026-109619)
Severity:
CVE ID:
Rule Protection Details
Description: PHP is a widely used open-source server-side scripting language. A remote code execution vulnerability exists in the PHP core. Public research information indicates that PHP 5 and later versions may all be affected by this vulnerability. Some analyses point the attack surface to the php_session_rfc1867_callback function in the PHP session upload progress (session.upload_progress) handling path and suspect a use-after-free type memory corruption issue. Successful exploitation of this vulnerability could allow arbitrary code execution on the target server with the privileges of the PHP service process account, leading to Web server compromise, page defacement, and sensitive data leakage, and potentially enabling lateral movement using internal network-accessible nodes as a springboard.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.