OpenAI Codex Security researchers reported CVE-2026-111497, a Brotli decoder flaw that prompted patches for Node.js 22.x, 24.x and 26.x.
The National Security Agency (NSA) advised “heightened awareness” of PHP2Shell over the coming weeks, saying that any and all ...