News
Security Vulnerabilities and Threat Updates (Oct 23, 2026)
• PHP warns of a new unpatched RCE (CVE-2026-115560) two days after emergency PHP2Shell patches. • Russian-linked Sandworm used a mesh network backdoor in a destructive attack on a Ukrainian logistics firm. • Critical flaw in Python’s Pillow library (CVE-2026-112900) allows code execution via crafted images. • Researchers demonstrate Node2Shell RCE exploit on Node.js using malicious Brotli data. • PHP2Shell exploit attempts aim to deploy Mirai‑style botnet “Potassium”. • Two CVSS 9.0 Linux KSMBD RCE flaws disclosed before kernel fixes.