Skip to content

#CISA KEV

1 article

Knowledge base Oct 28, 2026

PHP2Shell and Node2Shell: virtual patching before you deploy the fixes

Within two days CISA added two PHP flaws known as PHP2Shell and a Google Brotli decoder flaw called Node2Shell to its KEV catalog. We explain who is affected, which versions fix them and how virtual patching protects applications before the fixes reach every server.