#Vulnerability

Critical flaw in EDK2 allows attackers to execute code early in the boot process.

CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a single-worker mod_php setup.

CVE-2026-107590: Low-severity out-of-bounds write in Qt QTextCodec iconv encoding. Update to Qt 6.8.9, 6.11.3, 6.12.0 or apply patch.

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

The Immediate Threat Landscape On Monday, the core PHP maintainers issued an advisory that...