24h | 7d | 30d

CVE-2026-111497

Overview

Google
Brotli
github.com/google/brotli

22 Oct 2026

Published

24 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

0.71%

MITRE

KEV

Description

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Statistics

25 Posts
403 Interactions

Last activity: 2 hours ago

Fediverse

Scary "Grampus" Jerry 👻 @jerry

Please be sure you don’t take your eye off the big node.js/brotli vulnerability while php2shell was sucking all the air from the room. https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

142
98
0
18h ago

Team KeePassXC @keepassxc

RE: https://fosstodon.org/@keepassxc/117320648185069600

🚨Attention! Yesterday, we published new 2.8.0-1 binaries for macOS (DMG) and Linux (AppImage) to fix three separate upstream Qt bugs on macOS and to ship an updated version of Brotli that fixes CVE-2026-111497.

The new version will not show up as an update automatically, but we recommend everyone to install it from https://keepassxc.org/download/ until the release of 2.8.1.

74
51
0
21h ago

Jan Schaumann @jschauma

Ubuntu still considers the #brotli RCE (CVE-2026-111497) as "medium" priority:

https://ubuntu.com/security/CVE-2026-111497

Some other Linuxes:

AlpineLinux: https://security.alpinelinux.org/vuln/CVE-2026-111497

Debian: https://security-tracker.debian.org/tracker/CVE-2026-111497

Gentoo: https://bugs.gentoo.org/show_bug.cgi?id=CVE-2026-111497

RedHat:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-111497
https://access.redhat.com/security/cve/cve-2026-111497

SuSE: https://www.suse.com/security/cve/CVE-2026-111497.html

7
2
0
15h ago

Weblate @weblate

No day is an off day in online #security.
Running a Dockerized #Weblate? Go on to https://github.com/WeblateOrg/docker/releases/tag/2026.10.1.3 and pull it to get some peace of mind. It addresses the issue in #Brotli, CVE-2026-111497. #Weblate cloud is updated already.
Happy Saturday from the team! #OpenSource #YourSoftwareYourLanguage

2
8
0
15h ago

hex @Hex

CVE-2026-111497 is classified as CWE-787. Can *anyone* confirm that it works with ASLR enabled, or was that *completely omitted* from all reports?

2
1
0
22h ago

DACBARBOS Brand @dacbarbos

MT @AikidoSecurity@X.com
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

2
0
0
8h ago

Eldritch kcarruthers @kcarruthers

Uh oh: ⚠️ Brotli is a widely used compression library from Google. On Wednesday, October 21st NodeJS disclosed CVE-2026-111497, dubbed “node2shell,” wherein a Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code. On Thursday, Python disclosed that Python packages were vulnerable to CVE-2026-111497 as well.

ht @jerry
https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

1
2
0
17h ago

Thomas Steen Rasmussen @tykling

...yes https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

1
1
1
20h ago

Larvitz :fedora: @Larvitz

2/3 Also done today:

Checked the Node.js October security release (Brotli CVE-2026-111497). Our streaming server never decompresses untrusted Brotli data, so the risk is low. We'll update as soon as the FreeBSD package is out.

The streaming server now properly verifies the database's TLS certificate.

Rewrote our rc.d scripts the way rc.subr intends: supervisor pidfile, automatic restart after a crash, and "service restart" works on the first try. Background: https://blog.hofstede.it/freebsd-foundationals-rcd-the-service-framework-that-fits-in-your-head/

Package updates on the host and in all jails

nginx: separate cache directories, a nearby DNS resolver (thousands of DNS errors gone) and a catch-all for unknown hostnames

We retired our Tor onion service

Lots of small cleanups after a deep health check

1
0
0
21h ago

🛡️ #1 hacks.gr @hacksgr

CVE-2026-111497 is a memory-corruption flaw in Google’s Brotli decoder, used by software including Bun, Python Brotli and brotlicffi, Envoy, Istio, Node.js and cdxgen.

Crafted compressed data can corrupt program memory and potentially lead to code execution.

Imperva researchers demonstrated code execution on an unpatched Node.js build; similar execution has not been shown on the other affected software, and no real-world attacks have be…

https://en.hacks.gr/sovaro-provlima-asfaleias-ston-kodika-tis-google-epireazei-node-js-kai-alles-efarmoges/

#Brotli #NodeJS #Python #Envoy

0
0
0
20h ago

Stéphan Mestach @mestachs

Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected.
https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

Season greetings

0
0
2
15h ago

Michele Adduci @madduci

Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more
https://broccoli2shell.com/

0
0
0
15h ago

hex @Hex

"The public PoC's own author states it plainly: the highest verified result is bounded command execution, demonstrated only on a deliberately non-PIE, ASLR-off local harness — not a portable remote exploit."

#node2shell

https://medium.com/@guidancewhite/cve-2026-111497-node2shell-how-brotlis-counter-exhaustion-turned-an-error-into-an-arbitrary-47ded2c7617b

0
0
0
2h ago

Markus 👨‍💻 @markusr

Möchte nicht wissen, wie viele Firmen diese Woche keine Updates für PHP (CVE-2026-109618, CVE-2026-109619), Node.js (CVE-2026-111497), ca-certificate (eMudhra) etc. installiert haben, weil Patchday nur 1x pro Quartal oder so.

0
6
0
22h ago

Bluesky

「HTTP2Shell」CVE-2026-111497、Node.js・Python・Bun・Envoyに影響 Brotliの重大脆弱性と修正版を確認|セキュリティニュースのセキュリティ対策Lab https://rocket-boys.co.jp/security-measures-lab/brotli_cve-2026-111497_http2shell_20261024/

0
2
1
10h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Node.js patched CVE-2026-111497, an out-of-bounds write in its Brotli decoder. Attacker-controlled compressed data may reach it through direct APIs or HTTP responses; a PoC showed a crash and limited memory disclosure on standard builds, but no reliable RCE.

0
0
0
23h ago

セキュリティ対策Lab @securitylab-jp.bsky.social

「HTTP2Shell」CVE-2026-111497、Node.js・Python・Bun・Envoyに影響　Brotliの重大脆弱性と修正版を確認 rocket-boys.co.jp/security-mea... #セキュリティ対策Lab #security #securitynews #セキュリティ #セキュリティニュース

0
0
0
22h ago

Information Security Briefly @infosecbriefly.bsky.social

CVE-2026-111497 in Google’s Brotli decoder can corrupt memory via crafted Brotli data, requiring each affected product to update its bundled decoder copy.

0
0
0
20h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

CVE-2026-111497 is an out-of-bounds write in vulnerable Brotli decoders, reachable through attacker-controlled compressed data and potentially enabling memory disclosure, crashes or code execution. Fixes are available for Brotli, Python packages and affected runtimes.

0
0
0
18h ago

IT-Administrator Magazin @it-administrator.de

CVE-2026-111497 (CVSS 9,2) gefährdet Node.js, Python und weitere Anwendungen. Manipulierte komprimierte Daten können Speicherfehler und sogar Remote Code Execution auslösen. ⚠️ Abhängigkeiten prüfen und Updates einspielen! www.it-administrator.de/brotli-siche... #ITSecurity #Brotli

0
0
0
18h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

Open Source Malware says CVE-2026-111497 affects bundled Brotli decoders across many ecosystems. Malformed block-type switches can cause an out-of-bounds write; the article lists fixes and urges teams to find bundled copies and avoid decoding untrusted data.

0
0
0
12h ago

CVE-2026-109618

Overview

PHP Group
PHP
php-src

21 Oct 2026

Published

23 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

11.84%

MITRE

KEV

Description

PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may read or branch on this memory. Multiple OOM strategies can consistently trigger this condition and lead to remote code execution (RCE).

Statistics

15 Posts
29 Interactions

Last activity: Last hour

Fediverse

Alexandre Dulaunoy @adulau

If you are looking for detection rules for recent vulnerabilities, you can use rulezet

https://rulezet.org/vulnerability/CVE-2026-109618

It's pretty nifty.

#rulezet #opensource #opendata #cybersecurity #detectionengineering

5
9
0
8h ago

PPC Land @ppcland

FYI: CVE: CVE (Common Vulnerabilities and Exposures) is the public list giving each disclosed software flaw a unique ID such as CVE-2026-109618, run by MITRE since 1999. https://ppc.land/cve/ #CVE #CyberSecurity #Vulnerabilities #MITRE #SoftwareSecurity

0
0
0
11h ago

Darryl Cousins @cousinsd

This came up through my local ham radio group email (from ZL3TUX) so I felt it worth to spread here too:

"
FYI the Pi-Star firmware is vulnerable to the recent PHP vulnerability:
https://www.ncsc.govt.nz/alerts/cve-2026-109618-and-cve-2026-109619-affecting-php/

If you haven't already, upgrade PHP using APT in the normal Debian way then reboot. Backup first to be on the safe side: these SD cards have a hard life being mostly unshielded near the RF pin on the MMDVM hats.

$ rpi-rw
$ sudo mount -o remount,rw /boot/firmware/
$ sudo apt update
$ sudo apt dist-upgrade

I've tested the above steps using the latest image (4.3.7) on a Pi Zero here and it takes about an hour. Hopefully an official updated image will be available soon.
"

To be fair I have no idea what Pi-star is nor does, or what an MMDVM hat is. :-)

Hope that helps someone.

#HamRadio #PHP2Shell

[Edit to remove pasted linebreaks]

4
3
0
11h ago

EPY Host @epyhost

⚠️ Critical Security Alert for all EPY Host dedicated server clients!

Highly critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) require immediate patching to prevent remote code execution. Please SSH into your servers, update your OS packages, and restart your web server and PHP daemons.

Discover why dedicated server isolation keeps you safer than shared hosting. Read more: https://www.epyhost.com/blogs/php-vulnerability-dedicated-server-isolation/

#ServerSecurity #DedicatedServers #CyberSecurity #PHPUpdate #SysAdmin #WebHosting

0
1
0
20h ago

Michael K. Laweh (Klytron) @klytron

Critical 9.2 RCE vulnerabilities CVE-2026-109618 & CVE-2026-109619 are active in PHP environments. WordPress updates alone won't protect you. Full emergency guide at klytron.com.

#klytron #cybersecurity #infosec #vulnerability #cve #phpexploit #klytron

0
0
0
22h ago

AllAboutSecurity @allaboutsecurity

PHP2Shell: PAN-OS und Panorama von PHP-Lücken betroffen

Palo Alto Networks hat bestätigt, dass die PHP-Schwachstellen CVE-2026-109618 und CVE-2026-109619 seine Firewall- und Management-Produkte betreffen. Das Risiko liegt vor allem in der Web-Verwaltungsschnittstelle. Hotfixes werden derzeit bereitgestellt, Signaturen zur Bedrohungsabwehr stehen bereits zur Verfügung.

https://www.all-about-security.de/php2shell-pan-os-und-panorama-von-php-luecken-betroffen/

#paloalto #php #cybersecurity #itsicherheit

0
0
1
20h ago

🛡️ #1 hacks.gr @hacksgr

Two PHP flaws, named PHP2Shell (CVE-2026-109618 and CVE-2026-109619), allowed access to online systems without a password. PHP is used by about 70% of websites, including those running WordPress, Drupal, Joomla and MediaWiki.

The PHP Foundation released fixes on October 21, 2026. Amazon had detected attempts to exploit the flaws about a week before the fixes were publicly announced. Palo Alto Networks and Trail of Bits later confirme…

https://en.hacks.gr/sovara-kena-asfaleias-stin-php-epetrepan-prosvasi-choris-kodiko/

#PHP #PHP2Shell #WordPress #Drupal

0
0
0
15h ago

Markus 👨‍💻 @markusr

0
6
0
22h ago

Bluesky

Best of r/cybersecurity @cybersecurity.page

Amazon threat intel saw PHP2Shell exploitation attempts (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) from October 17, four days before disclosure, widening after October 21. No confirmed compromise yet. Tor hides IPs, not app flaws: patch to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 and check logs.

0
1
0
18h ago

Information Security Briefly @infosecbriefly.bsky.social

Two long-dormant PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) enabled passwordless compromise of PHP servers, prompting urgent patching worldwide.

0
0
0
15h ago

technews4869 @technews4869.bsky.social

www.ipa.go.jp/security/sec... PHPの脆弱性対策について(CVE-2026-109618、CVE-2026-109619：PHP2shell) | 情報セキュリティ | IPA 独立行政法人情報処理推進機構

0
0
0
2h ago

ripjyr.bsky.social @ripjyr.bsky.social

Paloaltoの脆弱性情報「CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH)」が公開されました。 → https://security.paloaltonetworks.com/CVE-2026-109618

0
0
0
Last hour

Remi's RPM repository @remirepo.net

🛡️ Security updates: - php-7.2.34-30 - php72-php-7.2.34-30 With mitigation for security fix backported from 8.2.34/8.2.35 (CVE-2026-109618, CVE-2026-109619, CVE-2026-91765)

0
0
1
Last hour

CVE-2026-109619

Overview

PHP Group
PHP
php-src

21 Oct 2026

Published

23 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

6.22%

MITRE

KEV

Description

PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on this stale state before it is fully initialized. Multiple strategies can trigger this condition and produce remote code execution (RCE).

Statistics

13 Posts
15 Interactions

Last activity: Last hour

Fediverse

Darryl Cousins @cousinsd

This came up through my local ham radio group email (from ZL3TUX) so I felt it worth to spread here too:

"
FYI the Pi-Star firmware is vulnerable to the recent PHP vulnerability:
https://www.ncsc.govt.nz/alerts/cve-2026-109618-and-cve-2026-109619-affecting-php/

$ rpi-rw
$ sudo mount -o remount,rw /boot/firmware/
$ sudo apt update
$ sudo apt dist-upgrade

I've tested the above steps using the latest image (4.3.7) on a Pi Zero here and it takes about an hour. Hopefully an official updated image will be available soon.
"

To be fair I have no idea what Pi-star is nor does, or what an MMDVM hat is. :-)

Hope that helps someone.

#HamRadio #PHP2Shell

[Edit to remove pasted linebreaks]

4
3
0
11h ago

EPY Host @epyhost

⚠️ Critical Security Alert for all EPY Host dedicated server clients!

Discover why dedicated server isolation keeps you safer than shared hosting. Read more: https://www.epyhost.com/blogs/php-vulnerability-dedicated-server-isolation/

#ServerSecurity #DedicatedServers #CyberSecurity #PHPUpdate #SysAdmin #WebHosting

0
1
0
20h ago

Michael K. Laweh (Klytron) @klytron

Critical 9.2 RCE vulnerabilities CVE-2026-109618 & CVE-2026-109619 are active in PHP environments. WordPress updates alone won't protect you. Full emergency guide at klytron.com.

#klytron #cybersecurity #infosec #vulnerability #cve #phpexploit #klytron

0
0
0
22h ago

AllAboutSecurity @allaboutsecurity

PHP2Shell: PAN-OS und Panorama von PHP-Lücken betroffen

https://www.all-about-security.de/php2shell-pan-os-und-panorama-von-php-luecken-betroffen/

#paloalto #php #cybersecurity #itsicherheit

0
0
1
20h ago

🛡️ #1 hacks.gr @hacksgr

https://en.hacks.gr/sovara-kena-asfaleias-stin-php-epetrepan-prosvasi-choris-kodiko/

#PHP #PHP2Shell #WordPress #Drupal

0
0
0
15h ago

Markus 👨‍💻 @markusr

0
6
0
22h ago

Bluesky

Best of r/cybersecurity @cybersecurity.page

0
1
0
18h ago

Information Security Briefly @infosecbriefly.bsky.social

Two long-dormant PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) enabled passwordless compromise of PHP servers, prompting urgent patching worldwide.

0
0
0
15h ago

technews4869 @technews4869.bsky.social

www.ipa.go.jp/security/sec... PHPの脆弱性対策について(CVE-2026-109618、CVE-2026-109619：PHP2shell) | 情報セキュリティ | IPA 独立行政法人情報処理推進機構

0
0
0
2h ago

ripjyr.bsky.social @ripjyr.bsky.social

0
0
0
Last hour

Remi's RPM repository @remirepo.net

🛡️ Security updates: - php-7.2.34-30 - php72-php-7.2.34-30 With mitigation for security fix backported from 8.2.34/8.2.35 (CVE-2026-109618, CVE-2026-109619, CVE-2026-91765)

0
0
1
Last hour

CVE-2026-110447

Overview

Collabora
Collabora Online - Built-in CODE Server
richdocumentscode

14 Oct 2026

Published

24 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.2)

EPSS

2.28%

MITRE

KEV

Description

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.

Statistics

5 Posts
1 Interaction

Last activity: Last hour

Fediverse

Berk Tech @berktech

💻 Teknoloji Haberi

CISA Bayrakları Kollabora Online ve Arista VeloCloud'da Aktif Olarak Sömürülen İki Kritik Hata

ABD Siber Güvenlik ve Altyapı Güvenlik Ajansı (CISA) Cuma günü, Collabora Online Dahili KOD Sunucusu ve Arista VeloCloud Orkestrator'u (VCO) vahşi doğada aktif sömürü raporlarına dayanarak etkileyen iki güvenlik açığı ekledi. Kritik güvenlik açıkları aşağıda listelenmiştir - CVE-2026-110447 (CVSS puanı: 9.2) - Bir işletim

🔗 https://birolkurnaz.com/l/YRbu60

0
1
0
Last hour

ekiledjian @edwardk

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities to its Known Exploited Vulnerabilities catalog, citing active exploitation in the wild, The Hacker News reports. The flaws are CVE-2026-110447 (CVSS 9.2) in Collabora Online’s Built-in CODE Server and a SQL injection flaw in Arista’s VeloCloud Orchestrator. https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html

0
0
0
22h ago

Cybersecurity & cyberwarfare @cybersecurity

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online – Built-in CODE Server flaw, tracked as CVE-2026-110447 (CVSS score of 9.2), to its Known Exploited Vulnerabilities (KEV) catalog. Collabora Online – Built-in CODE Server is […]
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog

0
0
0
14h ago

🛡️ #1 hacks.gr @hacksgr

CISA added two vulnerabilities to its Known Exploited Vulnerabilities catalog.

The first is CVE-2026-110447, a CVSS 9.2 command injection in the Nextcloud Collabora Online Built-in CODE Server allowing remote code execution via proxy.php, with fixes in version 26.4.303.

The second is CVE-2026-114625, a CVSS 9.9 SQL injection in on-premise Arista VeloCloud Orchestrator requiring authentication, with fixes in versions 5.2.3.18, 6…

https://en.hacks.gr/i-cisa-prosthetei-dyo-nea-kena-asfaleias-poy-axiopoioyntai-se-pragmatikes-epitheseis/

#Nextcloud #Arista #Vulnerability #CISA

0
0
0
23h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

CISA added CVE-2026-110447, an OS command injection vulnerability in Collabora Online’s built-in CODE Server, to its KEV Catalog based on evidence of active exploitation. Federal agencies must prioritize remediation under BOD 26-04.

0
0
0
23h ago

CVE-2026-115560

Overview

Pending

Pending

Published

Pending

Updated

CVSS

Pending

EPSS

Pending

MITRE

KEV

Description

This candidate has been reserved by a CVE Numbering Authority (CNA). This record will be updated by the assigning CNA once details are available.

Statistics

5 Posts
1 Interaction

Last activity: Last hour

Fediverse

Mike | Raymond Tec @mike

A New PHP Risk Needs a Workaround, Plus 2 Stories https://raymondtec.com/2026/10/php-session-upload-progress-vulnerability-plus-2-stories/?utm_source=mastodon&utm_medium=social&utm_campaign=daily_brief

PHP disclosed a new session upload progress vulnerability with no fixed release yet. Here’s the temporary mitigation, plus AWS capacity pressure and PwC’s vendor incident.

#TechNews #AmazonWebServices #CloudComputing #CVE2026115560 #databreach #PHP #PwC

0
0
0
21h ago

The CyberSec Guru @guru

CVE-2026-115560 Explained: The PHP Session Bug That Survives the PHP2Shell Patches

CVE-2026-115560 is a potential PHP RCE tied to session upload progress. Learn the affected configuration, security risks, and official mitigation

https://thecybersecguru.com/exploits/cve-2026-115560-php-session-rce/

0
0
0
13h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

PHP disclosed CVE-2026-115560, a separate session-configuration flaw, as reporting on PHP2Shell exploitation attempts and scanning continues. Vendor assessments show PHP2Shell exposure in embedded products; successful exploitation remains deployment-dependent, with no |

1
0
0
19h ago

Spiegel＠がんばらない @mstdn.baldanders.info

＞PHPのRCE脆弱性(Critical: CVE-2026-115560) - SIOS SECURITY BLOG https://security.sios.jp/vulnerability/php-security-vulnerability-20261024/

0
0
0
19h ago

Cybersecurity News Everyday @hendryadrian.bsky.social

PHP's Security Team says CVE-2026-115560 could enable RCE under an uncommon combination of session settings. No patch was available as of Oct. 24, 2026; disabling session.upload_progress.enabled is the recommended mitigation.

0
0
0
Last hour

CVE-2026-114625

Overview

Arista Networks
VeloCloud Orchestrator

22 Oct 2026

Published

24 Oct 2026

Updated

CVSS v3.1

CRITICAL (9.9)

EPSS

0.81%

MITRE

KEV

Description

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. On an affected system, any authenticated user can gain operator privileges and masquerade as a local "superuser operator" user. This includes access to functionality that is intended for internal use only and which is not intended to be remotely accessible. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.

Statistics

3 Posts

Last activity: 22 hours ago

Fediverse

Cybersecurity & cyberwarfare @cybersecurity

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical Arista VeloCloud Orchestrator flaw, tracked as CVE-2026-114625 (CVSS score of 9.4), to its Known Exploited Vulnerabilities (KEV) catalog. VeloCloud Orchestrator (VCO) is the central management system for […]
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

0
0
0
22h ago

🛡️ #1 hacks.gr @hacksgr

CISA added two vulnerabilities to its Known Exploited Vulnerabilities catalog.

The first is CVE-2026-110447, a CVSS 9.2 command injection in the Nextcloud Collabora Online Built-in CODE Server allowing remote code execution via proxy.php, with fixes in version 26.4.303.

The second is CVE-2026-114625, a CVSS 9.9 SQL injection in on-premise Arista VeloCloud Orchestrator requiring authentication, with fixes in versions 5.2.3.18, 6…

https://en.hacks.gr/i-cisa-prosthetei-dyo-nea-kena-asfaleias-poy-axiopoioyntai-se-pragmatikes-epitheseis/

#Nextcloud #Arista #Vulnerability #CISA

0
0
0
23h ago

Bluesky

Cybersecurity News Everyday @hendryadrian.bsky.social

CISA added CVE-2026-114625, an Arista VeloCloud Orchestrator SQL injection flaw, to its KEV Catalog based on evidence of active exploitation and urged organizations to prioritize remediation.

0
0
0
23h ago

CVE-2026-115995

Overview

Unitree Robotics
Unitree Go2

24 Oct 2026

Published

24 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.4)

EPSS

Pending

MITRE

KEV

Description

A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corresponds to our internal ticket #474 (Go2 chat_go set_volume OS command injection, CWE-78)."

Statistics

2 Posts
2 Interactions

Last activity: 7 hours ago

Fediverse

OffSequence @offseq

CVE-2026-115995 (CRITICAL, CVSS 9.4): OS command injection in Unitree Go2 (1.1.11.0 – 1.1.11.4) enables remote code execution via set_volume in chat_go. Upgrade to 1.1.11.5 to remediate. https://radar.offseq.com/threat/cve-2026-115995-os-command-injection-in-unitree-robotics-unitree-go2-28735a7dafc55240 #OffSeq #CVE2026115995 #Robotics #Vuln

0
0
0
7h ago

Bluesky

Aiutocomputerhelp.it @aiuto-ch.bsky.social

CVE Radar | CVE-2026-115995 | CVSS 10.0 Unitree Go2 OS Command Injection CVE-2026-115995 affects Unitree Robotics Unitree Go2 versions up to 1.1.11.4. Full analysis: https://t.me/aiutocomputerhelp_lab/1330

1
1
0
7h ago

CVE-2022-22706

Overview

Pending

03 Mar 2022

Published

21 Oct 2025

Updated

CVSS

Pending

EPSS

1.06%

MITRE

KEV

Description

Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

Statistics

3 Posts

Last activity: 16 hours ago

Bluesky

/r/netsec @r-netsec-bot.bsky.social

Full source release: autonomous root chain for TCL 50C721 Android TV via CVE-2022-22706 (Mali GPU page-cache write)

0
0
1
20h ago

Hacker News 20 @betterhn20.e-work.xyz

Show HN: Autonomous root for Tcl Android TV via CVE-2022-22706 https://gitlab.com/c4psu13/mali-pagecache-root (https://news.ycombinator.com/item?id=50220042)

0
0
0
16h ago

CVE-2026-114820

Overview

Oracle Corporation
Oracle Java SE

24 Oct 2026

Published

25 Oct 2026

Updated

CVSS v3.1

CRITICAL (9.1)

EPSS

Pending

MITRE

KEV

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Statistics

3 Posts

Last activity: 4 hours ago

Fediverse

OffSequence @offseq

CVE-2026-114820: CRITICAL vuln (CVSS 9.1) in Oracle Java SE & GraalVM (multiple supported versions) allows remote, unauthenticated attackers to access/modify critical data via JSSE APIs. Patch immediately. https://radar.offseq.com/threat/vulnerability-in-the-oracle-java-se-oracle-graalvm-for-jdk-oracle-graalvm-enterprise-edition-cve-2026-dae362ae45879d06 #OffSeq #Java #Oracle #Vuln

0
0
0
5h ago

OffSequence @offseq

Oracle Java SE & GraalVM are vulnerable (CVE-2026-114820, CRITICAL, CVSS 9.1). Remote attackers can access & modify critical data via multiple network protocols. Update to the latest versions now. Details: https://radar.offseq.com/threat/cve-2026-114820-easily-exploitable-vulnerability-allows-unauthenticated-attacker-with-network-access-f9ee4fd5c21dce72 #OffSeq #JavaSecurity #CVE2026114820

0
0
0
4h ago

Bluesky

Spiegel＠がんばらない @mstdn.baldanders.info

＞Oracle Security Alert Advisory - CVE-2026-114820 https://www.oracle.com/security-alerts/alert-cve-2026-114820.html

0
0
0
10h ago

CVE-2026-108551

Overview

ferdikoomen
openapi-typescript-codegen

10 Oct 2026

Published

13 Oct 2026

Updated

CVSS v4.0

CRITICAL (9.3)

EPSS

0.42%

MITRE

KEV

Description

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter names, servers[0].url, or info.version to execute arbitrary JavaScript when generated clients are imported or service methods called.

Statistics

1 Post
3 Interactions

Last activity: 7 hours ago

Fediverse

Dark Web Informer :verified_paw: @DarkWebInformer

🚨 A crafted OpenAPI document can turn generated TypeScript clients into a code execution path; CVE-2026-108551

PoC: https://github.com/Zombie-Kaiser/CVE-2026-108551-POC

The flaw affects openapi-typescript-codegen and stems from unsafe interpolation inside Handlebars templates. An attacker who controls an OpenAPI document can inject JavaScript through values such as path keys, parameter names, server URLs, or version fields.

CVSS: 9.3 Critical
Affected: openapi-typescript-codegen ≤ 0.31.0
Impact: Arbitrary JavaScript execution when generated clients are imported or affected service methods are called

The PoC demonstrates how malicious OpenAPI input can survive client generation and execute once the generated code is used.

2
1
0
7h ago

Showing 1 to 10 of 60 CVEs

Quick check

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

CVE-2026-115560 Explained: The PHP Session Bug That Survives the PHP2Shell Patches

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Bluesky

Overview

Description

Statistics

Fediverse

Bluesky

Overview

Description

Statistics

Fediverse