Vasyka 9b97e101ff security: patch PHP2Shell RCE CVE-2026-109618 + CVE-2026-109619
Pin base image from floating dunglas/frankenphp:1-php8.4 to
dunglas/frankenphp:1.13.4-php8.4.27 which ships PHP 8.4.27.

CVE-2026-109618: OOM memory corruption → unauthenticated RCE (CVSS 9.2)
CVE-2026-109619: use-after-free between requests → unauthenticated RCE (CVSS 9.2)
Both affect PHP-FPM, mod_php, FrankenPHP, php-cgi. Exploited in the wild.
Fixed upstream in PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-10-27 09:17:22 +00:00

AutoCRM

SaaS CRM multi-tenant pentru autoservice și magazin piese auto.

Stack

  • Laravel 12 + Filament 5
  • Octane (FrankenPHP runtime)
  • MariaDB 11.4
  • Redis 7
  • Stancl/Tenancy v3 (single-DB multi-tenant)

Domenii

  • service.mir.md — panou central super-admin
  • <slug>.service.mir.md — instanță tenant

Documentație

Vezi /root/service/docs/00-index.md în repo-ul părinte (separat de cod) pentru:

  • Arhitectură + decizii
  • Setup multi-tenant (3 niveluri izolare)
  • Toate cele 31 module preluate din prototip
  • Operațiuni (deploy / backup / add-tenant / troubleshoot)

Dev local

cp .env.example .env
composer install
npm install
php artisan key:generate
php artisan migrate
npm run build
php artisan octane:start --server=frankenphp

Deploy

Push pe main → Coolify auto-deploy.

License

Proprietary. © 2026.

S
Description
AutoCRM SaaS multi-tenant
Readme 15 MiB
Languages
PHP 78.1%
Blade 21.6%
Dockerfile 0.2%
Shell 0.1%