Microsoft and Adobe Patch Tuesday, November 2026 Security Update Review
2026-11-11T20:51:43Z•c11569b308b732b09ddf836e76107943b6b89b9401a66366be613091f6b35a96
CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-111943CVE-2026-111944BrotliCISACiscoFedRAMPKubernetesNode.jsPHPPHP2ShellTLSadobecertificate-authoritycloud-securitycode-signingconfiguration-hardeningcritical-vulnerabilitiesmicrosoftmitigationpatch-tuesdayremote-code-executionvulnerability-management
What happened
Qualys vulnerability intelligence highlights major November 2026 Microsoft and Adobe security updates, including 1,235 Microsoft vulnerabilities and 63 critical issues, as well as active remediation guidance for newly disclosed PHP2Shell remote-code-execution flaws (CVE-2026-109618 and CVE-2026-109619), Node.js Brotli RCE (CVE-2026-111497), and compromised eMudhra certificate intermediates (CVE-2026-111943 and CVE-2026-111944). The feed also covers Kubernetes host security, Cisco router hardening, FedRAMP continuous monitoring, and compensating controls for delayed patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- qualys_blog
- Record identifier
- c11569b308b732b09ddf836e76107943b6b89b9401a66366be613091f6b35a96
- Enrichment time
- 2026-11-11T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.