CERT24PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawLoading data…
CERT24Threat Observatory
Period

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP rebuilt its Windows packages for versions 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the included Brotli library. The flaw may allow memory corruption and potentially code execution. CISA's October 23 assessment recorded no exploitation at that time, and PHP's notice did not mention attacks.

← Back to intelligence

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

PHP rebuilt its Windows packages for versions 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the included Brotli library. The flaw may allow memory corruption and potentially code execution. CISA's October 23 assessment recorded no exploitation at that time, and PHP's notice did not mention attacks.