Tag

Application Security

2 articles

Vulnerability Analysis 28 Oct 2026

Node2Shell (CVE-2026-111497): What It Is and How to Fix It

Node2Shell (CVE-2026-111497) is a critical out-of-bounds write in the Brotli decoder bundled with Node.js. Learn how it works, who is exposed through Express 5 and fetch(), how to detect vulnerable assets, and how to patch.

11 min read

Vulnerability Analysis 28 Oct 2026

CVE-2026-1928: Rank Math SEO PHP Object Injection Leads to Remote Code Execution

CVE-2026-1928 is a high-severity (CVSS 8.8) PHP Object Injection flaw in the Rank Math SEO WordPress plugin, versions 1.0.276 and earlier. Any user with Contributor access can abuse the updateMeta REST API endpoint to inject a serialized object, write a webshell and take over the site. Here is how to detect and fix it.

6 min read