Daily Archives: Nov 2, 2026
HTTP2Shell Vulnerability Spreads Beyond HTTP to .NET, FFmpeg, ClickHouse and Apache...
The HTTP2Shell issue extends beyond web servers: new research shows the same flaw in the Brotli decoder (CVE-2026-111497) can affect .NET applications, FFmpeg media processing, ClickHouse servers, and Apache Arrow workloads.
The work, published October 25 by JFrog researchers Aviv Engelberg, Eddy Tsalolikhin, and Ofri Ouzan,...
Microsoft Authenticator Flaw Lets Android Apps Steal Account Tokens Without Permissions
Microsoft fixes high-severity Authenticator for Android flaw that let apps steal work account tokens (CVE-2026-80097)
Severity: CVSS 8.6 — CVE-2026-80097
Microsoft has patched a high-severity...
Critical Okta Access Gateway Flaw Lets Attackers With Admin Privileges Execute...
Okta has disclosed a critical vulnerability in Okta Access Gateway that allows an authenticated administrator to execute system commands through the appliance’s Admin Console.
Tracked as CVE-2026-115547, the issue affects versions earlier than 2026.10.2 and carries a CVSS v3.1 score of 9.1, according to an advisory...