rpms.remirepo[.]netDomain
Reported by 2 independent sources · first reported by Help Net Security · last reported
Last reported 3 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP“PHP also warns that rpms.remirepo[.]net will not have updates on October 21, 2026, and urges its users to switch to distribution packages or build from source.”
-
PHP2Shell: Critical PHP vulnerabilities patched, update now!“Anyone who relies on rpms.remirepo[.]net, a volunteer-maintained repository, is advised to switch to distribution packages or build PHP from source so they can patch immediately.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-109618, CVE-2026-109619
Thanks — we review every report.