remote code execution – Security Blog

Oracle EBS Vulnerability Probed Days After Patch: What to Check

siteguarding2 — Wed, 28 Oct 2026 17:35:04 +0000

Attackers began probing CVE-2026-101767, a critical Oracle EBS vulnerability rated CVSS 9.8, on the morning of October 27, about a week after Oracle shipped the fix. If your company runs E-Business Suite for payroll, HR or finance, the server hosting your public website may be closer to that data than anyone has checked. Key takeaways Because Oracle E-Business Suite is where many companies keep...

Source

PHP2Shell Vulnerabilities Exploited: Patch PHP Before Oct 29

siteguarding2 — Wed, 28 Oct 2026 00:01:16 +0000

CISA added the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities catalog on October 26, after honeypots caught attackers running code on an unpatched PHP server. The flaws are in the PHP runtime itself, so updating WordPress or Joomla does not close them. Key takeaways PHP2Shell covers CVE-2026-109618 and CVE-2026-109619, two critical flaws in...

Source

Brotli Vulnerability CVE-2026-111497: Why Patching the OS Isn’t Enough

siteguarding2 — Mon, 26 Oct 2026 18:51:03 +0000

The Brotli vulnerability CVE-2026-111497, nicknamed HTTP2Shell, is a buffer overflow in Google's compression decoder that can crash processes, leak memory and allow remote code execution in Node.js, Python and .NET applications. Proof-of-concept exploits are public, and updating the system Brotli package, the fix most admins try first, leaves many deployments still vulnerable.

Source