Microsoft and Adobe Patch Tuesday, November 2026 Security Update Review
2026-11-11T08:51:43Z•583b8644bed330312778b5fe9e111b3b5d72b9f5ca814a1c3bd6f668cab2e2b6
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944AdobeBrotliCISACisco-router-securityFedRAMPKubernetesMicrosoftNode.jsPHPPHP2ShellTLS-certificatescertificate-authoritycloud-securitycode-signingconfiguration-hardeningeMudhrapatch-managementremote-code-executionrisk-operationsvulnerability-management
What happened
Qualys security intelligence highlights widespread November 2026 Microsoft and Adobe patching, critical PHP2Shell unauthenticated remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), a high-severity Node.js Brotli decoder RCE (CVE-2026-111497), and compromised eMudhra intermediate CA certificates (CVE-2026-111943 and CVE-2026-111944). The content emphasizes urgent vulnerability remediation, compensating controls, certificate revocation validation, Kubernetes host security, and risk-based security operations.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- 583b8644bed330312778b5fe9e111b3b5d72b9f5ca814a1c3bd6f668cab2e2b6
- Enrichment time
- 2026-11-11T08:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.