Microsoft Patch Tuesday, November 2026 Security Update Review
2026-11-10T20:51:42Z•4c70ab16714960106f12b5dee8540381ae45f75a9f32ffa2212489010b19c326
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944BrotliCISACisco routersFedRAMPKubernetesMicrosoft Patch TuesdayNode.jsPHPPHP2ShellTLS-certificatescertificate-authoritycode-signingeMudhraremote-code-executionrisk-operationssecurity-hardeningvulnerability-management
What happened
Qualys security research and product updates highlight multiple 2026 vulnerabilities and risk-management topics, including unauthenticated remote code execution in exposed PHP servers (PHP2Shell, CVE-2026-109618 and CVE-2026-109619), a critical Node.js Brotli decoder out-of-bounds write enabling remote code execution (CVE-2026-111497), and compromised eMudhra intermediate CA certificates involving CVE-2026-111943 and CVE-2026-111944. The feed also covers Microsoft Patch Tuesday, Cisco router hardening, Kubernetes node security, FedRAMP continuous monitoring, and mitigations for systems thatด?
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 4c70ab16714960106f12b5dee8540381ae45f75a9f32ffa2212489010b19c326
- Enrichment time
- 2026-11-10T20:51:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.