PHP Issues Emergency Windows Update for Critical Brotli Vulnerability
PHP has released an emergency security update for Windows to fix a critical vulnerability in the Brotli decoder, known as CVE-2026-111497. This flaw, evolving into HTTP2Shell, affects libraries and applications using HTTP. The update follows a previous patch issued within five days to address the Brotli code execution flaw, aiming to protect against remote code execution attacks.
LinkedIn·




