Security
Security notes: what recent vulnerabilities actually do, who is exposed, and the practical steps to patch and harden servers and homelab services.
- 2026
-
2026-10-31
PHP2Shell (CVE-2026-109618, CVE-2026-109619) and CVE-2026-115560: What Changed in PHP This Month and How to Patch
PHP2Shell is a pair of critical, unauthenticated remote code execution bugs in the PHP interpreter itself, already exploited in the wild. What the bugs...
-
2026-10-31
Brotli2Shell (CVE-2026-111497): What the Brotli Bug Does and How to Protect Your Servers
CVE-2026-111497, also called Node2Shell or HTTP2Shell, is a memory corruption bug in Google's Brotli decoder that affects Node.js, Python, .NET, Envoy and more. How...