Skip to main content
When a major vulnerability or security incident hits, we publish practical guidance here, fast. Each advisory follows the same structure:
  • At a glance: what happened, how serious it is, and the fix.
  • Are you affected? The versions or conditions that put you at risk.
  • What ThreatAware can do on your plan: Connect, Discover and Protect.
  • Find affected devices: ready-to-run queries.
  • Track the fix: follow every device to resolution.
  • Blind spots: what ThreatAware can’t see, so nothing gets missed.

​
Latest advisories

Node2Shell: find affected devices

21 October 2026 · High. Node.js Brotli decoder flaw (CVE-2026-111497) that can lead to remote code execution. Find the servers your scanner is missing and spot likely Node.js installs.

PHP2Shell: find affected devices

21 October 2026 · Critical. Two PHP runtime flaws (CVE-2026-109618, CVE-2026-109619) exploited from day one. Find the servers your scanner is missing and spot likely PHP installs.
Need help applying an advisory to your tenant? Contact your Customer Success Manager.