28 Oct 2026: PolyShell, Brotli, PeopleSoft, MLflow, GoAhead + 22 more

CISA added Adobe Commerce PolyShell and the Brotli decoder flaw to KEV, ZDI split the exploited PeopleSoft bug into three, and MLflow fixed an unauthenticated RCE.

28 October 2026 · 17 min · PPD