Live Feed

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw - The Hacker News

Reported by The Hacker News | October 26, 2026, 5:45 pm

Article Image

PHP updates Windows builds 8.2 through 8.5 to fix a Brotli flaw that could enable code execution through automatic cURL decompression.

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt …

Want to read the full report?

You are viewing a syndication snippet provided by the publisher via NewsAPI.

Read Full Story on Publisher Site ↗