Weekly digest — broader advisories (week of 2026-11-02)
Critical · CVSS 10.0 · fetched 2026-11-02
Weekly digest — broader advisories for the week of 2026-11-02. These items were verified against their canonical sources but are not PHP vulnerabilities, so the daily feed held them back; they are collected here for reference. The daily /threats feed publishes PHP-relevant items only. 1) Linux Kernel Missing Initialization of a Variable Vulnerability (CVE-2026-46300) — High · CVSS 7.8 · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-28 2) GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability (CVE-2026-97229) — Critical · CVSS 10.0 · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-29 3) Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability (CVE-2026-76418) — High · CVSS 8.6 · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-29 4) Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability (CVE-2026-111357) — High · CVSS 7.0 · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-30 5) Broadcom VMWare ESX Insufficient Logging Vulnerability (CVE-2026-41709) — Low · CVSS 2.7 · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-28 6) Google Brotli Unchecked Return Value Vulnerability (CVE-2026-111497) — Unrated · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-27 7) Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability (CVE-2026-118527) — Unrated · CISA KEV · CISA Known Exploited Vulnerabilities Catalog · fetched 2026-10-30 8) CVE-2026-120338 — Critical · CVSS 10.0 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 9) CVE-2026-111322 — Critical · CVSS 9.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 10) CVE-2026-77366 — Critical · CVSS 9.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 11) CVE-2026-51994 — Critical · CVSS 9.1 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 12) CVE-2026-101062 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 13) CVE-2026-110207 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 14) CVE-2026-111767 — High · CVSS 8.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 15) CVE-2026-77262 — High · CVSS 8.6 · NIST National Vulnerability Database (NVD) · fetched 2026-10-29 16) CVE-2026-77363 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 17) CVE-2026-77926 — High · CVSS 8.8 · NIST National Vulnerability Database (NVD) · fetched 2026-11-02 18) CVE-2026-111451 — High · CVSS 7.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 19) CVE-2026-116816 — High · CVSS 7.8 · NIST National Vulnerability Database (NVD) · fetched 2026-10-29 20) CVE-2026-104850 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 21) CVE-2026-108395 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 22) CVE-2026-109527 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 23) CVE-2026-114123 — High · CVSS 7.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-31 24) CVE-2026-109403 — High · CVSS 7.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 25) CVE-2026-61788 — High · CVSS 7.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 26) CVE-2026-96893 — High · CVSS 7.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 27) CVE-2026-77474 — High · CVSS 7.1 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 28) CVE-2026-100858 — Medium · CVSS 6.8 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 29) CVE-2026-100633 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 30) CVE-2026-100868 — Medium · CVSS 6.3 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 31) CVE-2026-115415 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 32) CVE-2026-116691 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-29 33) CVE-2026-77266 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-29 34) CVE-2026-77269 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 35) CVE-2026-77364 — Medium · CVSS 6.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 36) CVE-2026-57207 — Medium · CVSS 5.9 · NIST National Vulnerability Database (NVD) · fetched 2026-10-31 37) CVE-2026-77268 — Medium · CVSS 5.5 · NIST National Vulnerability Database (NVD) · fetched 2026-10-29 38) CVE-2026-107820 — Medium · CVSS 5.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 39) CVE-2026-112047 — Medium · CVSS 5.4 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 40) CVE-2026-116095 — Medium · CVSS 5.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-26 41) CVE-2026-77272 — Medium · CVSS 5.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 42) CVE-2026-94485 — Medium · CVSS 5.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 43) CVE-2026-94486 — Medium · CVSS 5.4 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 44) CVE-2026-77361 — Medium · CVSS 4.7 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 45) CVE-2026-115718 — Medium · CVSS 4.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-27 46) CVE-2026-77321 — Medium · CVSS 4.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 47) CVE-2026-77362 — Medium · CVSS 4.3 · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 48) CVE-2026-101057 — Low · CVSS 3.1 · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 49) CISA Adds Two Known Exploited Vulnerabilities to Catalog — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-28 50) CISA Adds Two Known Exploited Vulnerabilities to Catalog — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-29 51) CISA Adds Two Known Exploited Vulnerabilities to Catalog — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-30 52) CVE-2026-107824 — Unrated · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 53) CVE-2026-115477 — Unrated · NIST National Vulnerability Database (NVD) · fetched 2026-10-31 54) CVE-2026-115478 — Unrated · NIST National Vulnerability Database (NVD) · fetched 2026-11-01 55) CVE-2026-59951 — Unrated · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 56) CVE-2026-61742 — Unrated · NIST National Vulnerability Database (NVD) · fetched 2026-10-30 57) CVE-2026-99164 — Unrated · NIST National Vulnerability Database (NVD) · fetched 2026-10-29 58) EPICS Base — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-27 59) Hitachi Energy CoreTec Product — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-29 60) Hitachi Energy TRO600 series products — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-29 61) Mitsubishi Electric GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizViz — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-27 62) Siemens Mendix SAML Module — Unrated · CISA Cybersecurity Advisories · fetched 2026-10-29
Remediation
These advisories sit outside PHPatch's PHP patching scope. Follow each source advisory's own guidance — the canonical source for every item is named in the list above — and apply vendor updates where the source advisory directs.
Affected PHP branches
See the source advisory.
Source: PHPatch Threat Desk — weekly digest · retrieved 2026-11-02T07:59:52-05:00 · https://services.nvd.nist.gov/rest/json/cves/2.0