Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own
2026-10-27T08:51:43Z•ac8a56b7a935c7957a58053a52254783cb71a9ae1b47a67a98b00f5ebf3986e2
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825Node.jsPHPWindows Defenderactive-exploitationcertificate-compromisecritical-vulnerabilityeMudhrapatchingprivilege-escalationremote-code-executionsupply-chain-securityvulnerability-managementweb-security
What happened
Qualys security research and advisories highlight multiple critical vulnerabilities and active exploitation risks, including PHP2Shell unauthenticated remote code execution and memory disclosure (CVE-2026-109618, CVE-2026-109619), a Node.js Brotli decoder out-of-bounds write enabling remote code execution (CVE-2026-111497), Windows Defender local privilege escalation to SYSTEM (CVE-2026-33825), and compromised eMudhra intermediate CA certificates enabling fraudulent TLS or code-signing certificates (CVE-2026-111943, CVE-2026-111944). The feed also covers Microsoft updates, mitigation guidance,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- ac8a56b7a935c7957a58053a52254783cb71a9ae1b47a67a98b00f5ebf3986e2
- Enrichment time
- 2026-10-27T08:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.