Back Isc.Sans.Edu

Signal Call Hang-Up Flaw (CVE-2026-113380); Cisco Snort 3 Critical Vulnerabilities

Isc.Sans.Edu • October 23, 2026

SANS Stormcast Friday, October 23rd, 2026: PHP2Shell Exploitation Update; Signal Call Hang-Up Flaw (CVE-2026-113380); Cisco Snort 3 Critical Vulnerabilities; Linux KSMBD RCE Reports Leaked

If you are not able to play the podcast using the player below: Use this direct link to the audio file:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PHP2Shell Exploit and Vulnerabilities in Node.js and Tailscale On October 22, 2026, CVE-2026-111497, a critical remote code execution vulnerability in PHP2Shell, was published with a CVSS score of 9.2. This vulnerability allows attackers to execute arbitrary code on affected systems. Additionally, vulnerabilities in Node.js related to Brotli decoding and Tailscale's 'Tailworm' were discussed. The articles indicate that multiple flaws in HPE ArubaOS were patched, addressing 72 vulnerabilities. The PHP2Shell exploit's reliability is a significant concern, as it could lead to widespread exploitation. Organizations using affected systems are urged to apply patches immediately. The current status of the PHP2Shell exploit indicates it may be in the wild. 2 sources 71

Extracted Entities

Signal Call Hang-Up Flaw (CVE-2026-113380); Cisco Snort 3 Critical Vulnerabilities

The full story

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (1)