Magento CVE-2026-48356 (PolyShell): Patch and Hunt
CVE-2026-48356 is the PolyShell file-upload flaw in Adobe Commerce and Magento Open Source. CISA added it to the KEV catalog on October 27, 2026. Here …
Tag
Remote Code Execution
Brotli CVE-2026-111497: Find and Patch Every Copy
CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder, now on CISA's KEV list. It ships inside Node.js, Python packages, Go modules, …
PHP2Shell CVE-2026-109618 and -109619: Patch, Then Hunt
Two PHP core flaws, CVE-2026-109618 and CVE-2026-109619, allow unauthenticated remote code execution against PHP that serves web requests. CISA added …