Vulnerabilities
GitLab CVSS 10 Regex RCE on CISA KEV After Alpine Attack
CISA's KEV now lists a CVSS 10 GitLab RCE hiding in Ruby's regex engine — and Alpine's near-miss shows why upgrading GitLab alone may not fix it.
remote code execution
CyberROI coverage tagged “remote code execution”.
Vulnerabilities
Brotli Decoder RCE Hits Node.js, Bun, Python and Envoy
CVE-2026-111497 is one C bug replicated across every runtime that ships Google's Brotli decoder. What's confirmed, what's claimed, and how to patch it all.
Vulnerabilities
Two Pre-Auth PHP Flaws Put 70% of the Web on the Clock
Working exploit attempts are already circulating for two pre-auth RCE flaws in PHP's runtime. We price out patching, WAF rules and pulling the plug.