PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

T2High 55Covered by 1 source · first reported by The Hacker News at 26 Oct, 17:45 UTC

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when…