RCE on Azriel Fidzlie

Next.js October 2026 Security Update: Executive Summary

Thu, 05 Nov 2026 05:02:50 +0700

Next.js released a security update on October 14, 2026 to fix three serious vulnerabilities, including Remote Code Execution and Denial of Service. Review the impact, affected versions, and remediation steps.

Critical Threats in the Node.js Ecosystem: Breaking Down the 'Node2Shell' RCE Vulnerability in the Brotli Module (CVE-2026-111497)

Fri, 30 Oct 2026 05:02:50 +0700

The web application development ecosystem has recently been shaken by the discovery of a critical vulnerability in Node.js. On October 21, 2026, the Node.js project released an emergency security update to patch 10 security flaws, with one vulnerability drawing the most attention: CVE-2026-111497.

Critical Threats Behind PHP: Dissecting Dangerous RCE Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)

Fri, 23 Oct 2026 05:02:50 +0700

Recently, the web development ecosystem was shaken by the disclosure of two critical vulnerabilities with a CVSS score of 9.2 in the core of PHP. These vulnerabilities allow attackers to carry out full Remote Code Execution (RCE) server takeover and execute malicious code even without requiring any authentication.