Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own
2026-10-27T20:51:43Z•bc0d98e22c5c1701bb122c48e679e38a4e7019e60ca1c907922fc93ad0280a47
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944CVE-2026-33825active-exploitationbrotlicertificate-authority-compromisecontainer-securitymicrosoft-patch-tuesdaynode.jspatchingphpprivilege-escalationremote-code-executiontls-certificatesvulnerability-managementweb-application-securitywindows-defender
What happened
Qualys security research and product updates covering several critical vulnerabilities and active exploitation risks, including PHP2Shell (CVE-2026-109618 and CVE-2026-109619) enabling unauthenticated remote code execution and memory disclosure, a Node.js Brotli decoder remote-code-execution flaw (CVE-2026-111497), Windows Defender local privilege escalation BlueHammer (CVE-2026-33825), and compromised eMudhra intermediate CA certificates (CVE-2026-111943 and CVE-2026-111944). The feed emphasizes urgent patching, interim configuration mitigations, certificate revocation, vulnerability priorit’
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- bc0d98e22c5c1701bb122c48e679e38a4e7019e60ca1c907922fc93ad0280a47
- Enrichment time
- 2026-10-27T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.