Skip to content
Critical PHP2Shell Exploit and Vulnerabilities in Node.js and Tailscale

Critical PHP2Shell Exploit and Vulnerabilities in Node.js and Tailscale

First seen 26 Oct 2026, 07:40 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 26, 2026 at 09:13 UTC
  • •CVE-2026-111497 is a critical RCE vulnerability in PHP2Shell with CVSS 9.2.
  • •Node.js and Tailscale vulnerabilities are also highlighted, requiring immediate attention.
  • •HPE ArubaOS has patched 72 vulnerabilities, emphasizing the need for timely updates.

On October 22, 2026, CVE-2026-111497, a critical remote code execution vulnerability in PHP2Shell, was published with a CVSS score of 9.2. This vulnerability allows attackers to execute arbitrary code on affected systems. Additionally, vulnerabilities in Node.js related to Brotli decoding and Tailscale's 'Tailworm' were discussed. The articles indicate that multiple flaws in HPE ArubaOS were patched, addressing 72 vulnerabilities. The PHP2Shell exploit's reliability is a significant concern, as it could lead to widespread exploitation. Organizations using affected systems are urged to apply patches immediately. The current status of the PHP2Shell exploit indicates it may be in the wild.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-20
CVE-2026-113380 published
A critical flaw in Signal's call hang-up feature was disclosed, rated CVSS 9.3.
Isc.Sans.Edu
2026-10-22
CVE-2026-111497 published
PHP2Shell exploit was disclosed with a critical CVSS score of 9.2, allowing remote code execution.
Dshield
Recent
HPE ArubaOS patches released
HPE released patches addressing 72 vulnerabilities in ArubaOS versions 8 and 10.
Dshield

More articles in this cluster (2)

Following this threat?

Track CVE-2026-111497 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2

Common questions

What systems are affected by CVE-2026-111497?
The vulnerability affects systems using PHP2Shell, allowing for remote code execution.
How critical is the PHP2Shell exploit?
It is rated CVSS 9.2, indicating a critical risk of exploitation.
What should organizations do to mitigate these vulnerabilities?
Organizations should apply the latest patches for PHP2Shell and HPE ArubaOS immediately.