PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
The Hacker News 26.10.2026 17:45
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code.
PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but
Linux Flaws Exposed Before Fixes as Root Exploit Goes Public
Infosecurity Magazine 26.10.2026 14:00
Six Linux flaws were made public, including one with a working root exploit and no merged fix
Microsoft Issues Emergency Patch Update for Critical .NET Buffer Overflow Flaw
Infosecurity Magazine 26.10.2026 12:45
Microsoft’s updates address two newly disclosed vulnerabilities in the .NET developer platform, as well as flaws not fully addressed in an earlier release
Schadcode-Attacken möglich: Lücke in Brotli-Decoder gefährdet zahllose Anwendungen
Golem 26.10.2026 10:44
Angreifer können aufgrund einer Sicherheitslücke in Brotli potenziell Schadcode über unzählige Apps einschleusen. Entwickler müssen dringend handeln. (Sicherheitslücke, FFmpeg)
Python schließt per Update kritische TLS-Lücke wegen eMudhra-Schlüsseln
Heise Security 26.10.2026 10:18
Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 und 3.11.18 beheben eine kritische Schwachstelle durch kompromittierte eMudhra-Zertifikate und weitere Lücken.
PHP Publishes Mitigation Advice for New RCE Flaw
Infosecurity Magazine 26.10.2026 09:15
PHP warns of critical RCE vulnerability CVE-2026-115560, but says limited exploit conditions mean most deployments are unlikely to be affected