Security
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
The Hacker News·October 26, 2026·1 min read
PHP released a second Windows security update in five days, rebuilding official packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a Brotli compression library flaw. The vulnerability can corrupt memory and potentially allow code execution. It is reachable via the cURL extension when decompressing HTTP responses automatically, though that feature is off by default.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.