27 Oct 2026: PHP2Shell, MeshCentral, Apple, Consul, Mautic + 26 more
CISA puts PHP2Shell in KEV while public evidence of successful attacks is still contested, MeshCentral ships an emergency fix for an active exploit, and Apple brings an exploited CoreGraphics fix to iOS 18.