23 Oct 2026: VeloCloud, Node2Shell, PHP2Shell, Railway + 16 more

An exploited VeloCloud SQL injection, a Node.js Brotli bug with a working RCE demo, a now-reliable PHP2Shell exploit, and Railway’s secrets breach.

23 October 2026 · 12 min · PPD