Browsing Tag

remote code execution

3 posts

N-able Pulls N-central Offline After 30+ “Zero-Days” Go Public. What to Ask Your IT Provider Today

Close-up of a network switch in a dark IT room, rows of ports glowing cobalt and turquoise, one blue network cable plugged in at the center, a single small orange indicator light at the right
N-able has taken its hosted N-central platform offline and told on-premises customers to switch their servers off after a researcher published more than 30 alleged flaws with attack code. Why one remote management server is a door into many networks, what N-able says, the questions to ask your IT provider today, and what is still unknown.
View Post

Broccoli2Shell: One Compression Bug Reaches Node.js, Python and Beyond. What to Patch, Restart and Check

A fresh broccoli floret resting on a white network server in a bright data center, turquoise cables plugged in behind it
A flaw in Google’s Brotli decoder (CVE-2026-111497, CVSS 9.2) reaches Node.js, Python’s Brotli packages, Bun, Envoy, .NET and dozens of bundled copies. The fix sat unreleased for 236 days. Fixed versions, how exploitable it really is, what OpenAI’s agent red-teaming had to do with it, the separate DreamHost password resets, and what companies and users should do now.
View Post

PHP2Shell and a Node.js Security Release on the Same Day: What to Patch, Restart and Check Now

A technician in a light grey shirt slides glowing turquoise server modules into an open white rack in a bright data hall with tall windows and blue sky
PHP fixed two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. On the same day, Node.js shipped fixes for ten vulnerabilities in 22.23.4, 24.22.1 and 26.12.1. What changed, who is exposed, which cloud platforms patch for you, how to check your version, and a patch-and-restart checklist for website owners, small businesses and admins.
View Post