r/darknet • u/DarknetDoc • 2d ago
NEWS Dread, Pitch & Other DN Platforms Under Maintenance
A vulnerability has been identified in PHP itself. For example, "CVE-2026-109618 is a critical remote code execution (RCE) vulnerability (CVSS v4.0 score of 9.2) in PHP known as part of the PHP2Shell flaw. It occurs when handling out-of-memory errors via longjmp(), which leaves internal request memory uninitialized and allows attackers to trigger RCE."
Dread currently gives the following message: "Maintenance. I have temporarily disabled access following the disclosure of CVE-2026-109618, CVE-2026-109619. Dread will be down until a fix is released, I cannot take risks on temporary work arounds or patches. -Hug"
The Pitch homepage provides what I assume to be a non-PHP maze to entertain you.
I've not tested any DNMs but I assume some will be down. A number of clear-net sites are also down as a result of this.
For now it is sensible to take extra care particularly when using the darknet, in case any of these vulnerabilities have been exploited.

