Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch
2026-11-05T20:51:43Z•44390b902516df0fbd912f46199ff55f05b431e8ac8fb34e2a73e58ba46ed6ce
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliCISACisco-router-hardeningFedRAMPKubernetesNode.jsPHPPHP2ShellWindows Defendercertificate-authority-compromisecontainer-securityeMudhralocal-privilege-escalationpatchingremote-code-executionsecurity-mitigationvulnerability-management
What happened
Qualys security intelligence highlights multiple critical and high-risk vulnerabilities and incidents, including unauthenticated remote code execution in PHP (CVE-2026-109618 and CVE-2026-109619), a Node.js Brotli decoder RCE (CVE-2026-111497), Windows Defender local privilege escalation (CVE-2026-33825), and compromised eMudhra certificate authorities (CVE-2026-111943 and CVE-2026-111944). The content emphasizes urgent patching, exposure discovery, configuration mitigations, certificate revocation, and security posture monitoring across cloud, Kubernetes, web, and enterprise environments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 44390b902516df0fbd912f46199ff55f05b431e8ac8fb34e2a73e58ba46ed6ce
- Enrichment time
- 2026-11-05T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.