Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches
2026-10-26T19:23:22Z•08412d3b99425220b87aa8b4b3070011bae5e2b8f0d467935d0a265bdaea5a63
CVE-2026-109618CVE-2026-109619.NETAI-agent-securityArubaOSBrotliNode.jsPHPSecure-Boot-bypassUEFI-bootkitactive-exploitationcritical-vulnerabilitycryptocurrency-scamdata-breachend-of-supportphishingremote-code-executionvulnerability
What happened
A BleepingComputer security-news feed covering critical vulnerabilities, active exploitation, emergency patches, UEFI bootkits, AI-agent abuse, data breaches, scams, and product lifecycle announcements. Notable items include critical Brotli-related flaws affecting Node.js and .NET, in-the-wild exploitation of PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619, BlackX UEFI bootkit activity bypassing Secure Boot, exposed RCE risk in the abandoned Time4Popcorn application, and multiple high-impact ArubaOS vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 08412d3b99425220b87aa8b4b3070011bae5e2b8f0d467935d0a265bdaea5a63
- Enrichment time
- 2026-10-26T19:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.