Security alerts for critical vulnerabilities and incidents

Security alerts

Security alerts from Exploitr's consultants on critical vulnerabilities and platform incidents, with affected versions, mitigations and patching guidance.
  1. Updated 28 Oct 2026

    Node2Shell (HTTP2Shell) Brotli Remote Code Execution (CVE-2026-111497)

    • Critical
    • Exploited in the wild
    • Patch available
  2. Updated 15:54

    PHP2Shell Remote Code Execution (CVE-2026-109618, CVE-2026-109619)

    • Critical
    • Exploited in the wild
    • Patch available
  3. Updated 28 Oct 2026, 07:40

    GitHub Investigates Internal Repository Breach via Malicious VS Code Extension

  4. Updated 23 Oct 2026, 14:56

    Copy Fail Linux Local Privilege Escalation (CVE-2026-31431)

    • High
    • Public proof of concept
    • Patch available
  5. Updated 23 Oct 2026, 14:29

    GitHub Bug Exposed Webhook Secrets to Recipient Endpoints

    • Fixed by GitHub on 26 January 2026

Get a fixed-price quote for your penetration test

Our team will help you scope the right assessment for your environment and agree a fixed price before testing starts.
Request a Quote Explore Services