Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch
2026-11-04T20:51:43Z•b27602c9902ae457d9d2af309ee81812e3dae8be1105938f3523b81296bfa054
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825BrotliCISA advisoriesCisco router hardeningFedRAMPKubernetesNode.jsPHPPHP2ShellTLS certificatesWindows Defendercertificate authority compromisecode-signing certificatescontainer securityeMudhrainterim mitigationlocal privilege escalationpolicy auditremote code executionvulnerability management
What happened
Qualys security intelligence highlights multiple 2026 vulnerabilities and security advisories, including critical unauthenticated remote code execution flaws in PHP (PHP2Shell, CVE-2026-109618 and CVE-2026-109619), a high-severity Node.js Brotli decoder RCE (CVE-2026-111497), Windows Defender local privilege escalation (CVE-2026-33825), and compromised eMudhra intermediate CA certificates (CVE-2026-111943 and CVE-2026-111944). The feed also covers configuration hardening, interim mitigations, vulnerability discovery, Kubernetes node protection, and compliance monitoring.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- b27602c9902ae457d9d2af309ee81812e3dae8be1105938f3523b81296bfa054
- Enrichment time
- 2026-11-04T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.