Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch
2026-11-07T08:51:43Z•1897218e0efccc61be7650b78da92a0f7e8fccff132c3d18951b1677ee7efe07
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliCISACisco-routersFedRAMPKubernetesNode.jsPHPPHP2ShellTLS-certificatesWindows Defendercertificate-compromisecode-signingconfiguration-hardeningcontainer-securityeMudhralocal-privilege-escalationpolicy-auditremote-code-executionunauthenticated-RCEvulnerability-management
What happened
Qualys security intelligence covering multiple 2026 vulnerabilities and security advisories. The most severe items are PHP2Shell (CVE-2026-109618 and CVE-2026-109619), critical unauthenticated remote code execution flaws in exposed PHP servers; Node.js Brotli decoder RCE (CVE-2026-111497); eMudhra certificate private-key compromise issues (CVE-2026-111943 and CVE-2026-111944); and BlueHammer (CVE-2026-33825), a Windows Defender local privilege-escalation chain. The collection also includes mitigation, detection, configuration-hardening, Kubernetes host security, and compliance guidance.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 1897218e0efccc61be7650b78da92a0f7e8fccff132c3d18951b1677ee7efe07
- Enrichment time
- 2026-11-07T08:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.