PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch
Summary
Cloud Sleuth catalogs a cluster of critical security incidents from October 2026, including PHP2Shell (RCE in PHP), a high-severity Node.js Brotli bug, GitLab CVE-2026-110264 (unauthenticated RCE), a supply-chain compromise in LiteLLM, and credential exposure linked to OpenCode and eMudhra. The piece emphasizes rapid patching, inventory, and access-control remediation, arguing that knowing where affected software runs across cloud and on-prem environments is essential to effective response.