Software maintainers have released emergency security updates for a critical buffer overflow vulnerability in the open-source Brotli data compression library.
PHP has rebuilt its official Windows binary packages to patch CVE-2026-111497, a memory corruption vulnerability in the bundled Brotli compression library that could lead to code execution.
Emergency security updates are being deployed across software ecosystems following the disclosure of a critical buffer overflow vulnerability in the Brotli data compression decoder.
CISA has added critical vulnerabilities in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalogue following evidence of active exploitation.
A public exploit has been released for a critical unauthenticated remote code execution flaw impacting Fortinet FortiSIEM.
