news
The Hacker News
October 26th, 2026 at 5:45 PMPHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses automatically. cURL leaves that off by default, but
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.61
Engagement proxy: 0
Canonical link: https://thehackernews.com/2026/10/php-issues-second-windows-security.html