vulnerability

Security advisory card: CVE-2026-111497 in the Brotli decoder

What Is CVE-2026-111497 (Node2Shell)? Brotli Risk and Fix

CVE-2026-111497, nicknamed Node2Shell or HTTP2Shell, is a memory-corruption flaw in Google's Brotli decompression library, not in Node.js itself. Because Brotli is bundled into Node.js, .NET, Python packages, proxies and...

Avatar photo Sajal Jain in CVE & Exploits · 9 min read >

What Are CVE-2026-109618 and CVE-2026-109619? PHP Flaws Explained

CVE-2026-109618 and CVE-2026-109619 are two critical PHP flaws that can let an attacker run code on a web server...

Sajal Jain in CVE & Exploits
Nov 3 · 9 min read >
Security advisory card: CVE-2026-109618 and CVE-2026-109619 in PHP