News
-
27 Oct 2026: PHP2Shell, MeshCentral, Apple, Consul, Mautic + 26 moreLatest
CISA added both PHP2Shell flaws to KEV with a 29 October deadline. Patch PHP, then upgrade MeshCentral to 1.3.1 and check servers for compromise.
-
26 Oct 2026: PHP2Shell, FortiOS, Gheist, Tailscale, Wasmtime + 32 more
PHP2Shell now has confirmed in-the-wild code execution. Patch PHP today, mod_php hosts first, then FortiOS before Fortinet publishes details on 10 November.
-
25 Oct 2026: Electrum, AWS eMudhra, Java SE, PAN-OS, X100 + 9 more
Upgrade Electrum to 4.8.3 now: malicious servers are stealing BTC. AWS ALB users must replace eMudhra-chained IdP certificates by 28 October.
-
24 Oct 2026: Collabora, PHP2Shell, Brotli, Okta OAG, ArubaOS + 31 more
Upgrade or remove Nextcloud's built-in Collabora CODE app today: it is exploited and in KEV, due Monday. Then disable PHP session upload progress.
-
23 Oct 2026: VeloCloud, Node2Shell, PHP2Shell, Railway + 16 more
Patch on-prem VeloCloud Orchestrator now: it is being exploited. Then upgrade Node.js for the Brotli bug and rotate anything stored in Railway.
-
22 Oct 2026: LiteLLM, PHP2Shell, GitLab, Storm-0940, Java SE + 20 more
If you installed LiteLLM 1.107.0 or pulled its latest image on 21 Oct, treat the host as compromised. Then patch PHP and self-managed GitLab.
-
21 Oct 2026: PHP2Shell, eMudhra CA keys, GlobalProtect, Plex + 11 more
Upgrade PHP today (mod_php first) and move certificates off emSign ECC Root CA - G3 before 27 Oct. Plus ransomware on GlobalProtect and exploited Plex.