https://www.threatwire.tech/news/goahead-6-1-1-fixes-tls-flaws-that-let-revoked-certificates-back-inThreatWireen2026-10-27T17:30:00.000ZGoAhead 6.1.1 fixes TLS flaws that let revoked certificates back in https://www.threatwire.tech/news/citrix-fixes-php2shell-in-netscaler-upgrade-to-14-1-73-49-or-13-1-64-32ThreatWireen2026-10-27T17:05:00.000ZCitrix fixes PHP2Shell in NetScaler: upgrade to 14.1-73.49 or 13.1-64.32 https://www.threatwire.tech/news/emudhra-blames-script-error-for-ca-keys-that-anyone-can-recoverThreatWireen2026-10-27T16:50:00.000ZeMudhra blames a script error for CA keys that anyone can recover https://www.threatwire.tech/news/ad-cs-domain-admin-climb-gets-public-poc-patch-april-2025-updatesThreatWireen2026-10-27T11:10:00.000ZAD CS Domain Admin climb gets a public PoC, patch April 2025 updates https://www.threatwire.tech/threats/php2shell-cisa-kev-exploited-patch-by-29-octoberThreatWireen2026-10-27T08:50:00.000ZCISA lists PHP2Shell as exploited and gives agencies until 29 October https://www.threatwire.tech/threats/beyondtrust-remote-support-zero-day-exploited-apply-bt26-05ThreatWireen2026-10-27T08:32:00.000ZAttackers exploited a BeyondTrust Remote Support zero-day: apply BT26-05 https://www.threatwire.tech/threats/tomcat-cluster-encryption-bypass-lets-attackers-run-code-cisa-lists-itThreatWireen2026-10-27T02:50:00.000ZTomcat cluster encryption bypass lets attackers run code, CISA lists it https://www.threatwire.tech/news/php-rebuilds-windows-builds-for-brotli-flaw-cve-2026-111497-five-days-after-php2shellThreatWireen2026-10-26T17:55:00.000ZPHP rebuilds Windows builds for Brotli flaw CVE-2026-111497, five days after PHP2Shell https://www.threatwire.tech/news/microsoft-re-fixes-two-dotnet-flaws-its-october-13-patches-missed-blazor-needs-package-updatesThreatWireen2026-10-26T17:20:00.000ZMicrosoft re-fixes two .NET flaws its October 13 patches missed; Blazor needs package updates https://www.threatwire.tech/news/apache-camel-and-camel-k-fix-eight-high-and-critical-flaws-oauth-bypass-deserialization-rceThreatWireen2026-10-26T16:15:00.000ZApache Camel and Camel K: eight high and critical flaws, from OAuth bypass to deserialization RCE https://www.threatwire.tech/news/bit-file-manager-flaw-lets-any-subscriber-read-wp-config-cve-2026-17540ThreatWireen2026-10-26T13:45:00.000ZBit File Manager flaw lets any subscriber read wp-config.php, CVE-2026-17540 https://www.threatwire.tech/news/wasmtime-fixes-two-critical-cranelift-sandbox-escapes-cve-2026-115889-and-cve-2026-115893ThreatWireen2026-10-26T13:00:00.000ZWasmtime fixes two critical Cranelift sandbox escapes, CVE-2026-115889 and CVE-2026-115893 https://www.threatwire.tech/news/brotli2shell-cve-2026-111497-reaches-dotnet-ffmpeg-clickhouse-and-arrowThreatWireen2026-10-26T11:10:00.000ZBrotli2Shell: CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse and Arrow https://www.threatwire.tech/research/linux-ipv6-rpl-route-of-root-is-cve-2026-43501ThreatWireen2026-10-26T00:10:00.000ZLinux IPv6 RPL "Route of Root" is CVE-2026-43501, CVSS 9.8