PHP has rebuilt its official Windows packages for versions 8.2 through 8.5 to address CVE-2026-111497, a critical memory corruption vulnerability within the bundled Brotli compression library. The flaw can be triggered via the cURL extension during automated HTTP response decompression, potentially leading to remote code execution.
LEES HET ORIGINELE ARTIKEL BIJ THEHACKERNEWS.COM →