Patching PHP2Shell Across a Dockerized Infrastructure

Patching PHP2Shell Across a Dockerized Infrastructure

With the PHP security team releasing emergency patches on October 21, 2026 for two critical remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), the request to update was immediate. Both flaws, collectively referred to as PHP2Shell, allow an unauthenticated attacker to execute code on any PHP installation serving web requests. The CVSS score is 9.2, and the PHP team’s guidance was clear: there are no complete mitigations, updating is the only safe choice.

Continue reading →

ESXi Host Hardware System Board Status on Cisco UCS

After running the Cisco UCS servers for a period of time, their System Event Log can begin fill up and present as a very generic error within ESXi. This occurred on four ESXi servers that were upgraded approximately the same time. While the logging will continue, it is quite a nuisance to view within vCenter. Even more so with the lack of flash to HTML5 support on the older UCS CIMC modules, like the ones running this blog. Thanks to CLI access, it can still be remediated.

Continue reading →

Signing a Certificate in Cisco IOS for CUBE with TLS + SRTP

With the drive of unified communications to cloud based connectivity, a Session Border Controller (SBC) can play an important part in supporting a migration from premise equipment.  Some gateway manufactures provide a convenient Graphical User Interface (GUI), others still focus on leveraging a command line interface (CLI).  This overview will step through the generation and signing of the certificates that would be used for Tranport Layer Security (TLS) for both signaling and media within a Cisco Unified Border Element (CUBE).

Continue reading →

Collaboration’s Transformation

I recently was having a discussion with a peer around Collaboration, the Spark to Webex updates, and how it has changed overtime.  A bit of reminiscence from previous versions of the Collaboration strategies and the direction they are going prompted me to create this entry.  Lets take a look at Collaboration’s past, present, and future and assess how your organization has adopted.

Continue reading →

Cisco and Microsoft UC Integration: Part 1 – Intradomain Federation Messaging

Working through many conversations with customers has lead to example the steps required to complete some Microsoft and Cisco integrations within the Unified Communications (UC) space.  For the scope of this exercise, the Skype for Business and Jabber endpoints using the same domain will be enabled for direct messaging only communication.  This is the first post in an intended mini-series referencing the integration as well as user experiences.

Continue reading →