> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security advisories

> Practical guidance from ThreatAware when a major security event hits: what happened, whether you're affected, and how to find and fix affected devices

When a major vulnerability or security incident hits, we publish practical guidance here, fast. Each advisory follows the same structure:

* **At a glance:** what happened, how serious it is, and the fix.
* **Are you affected?** The versions or conditions that put you at risk.
* **What ThreatAware can do on your plan:** Connect, Discover and Protect.
* **Find affected devices:** ready-to-run queries.
* **Track the fix:** follow every device to resolution.
* **Blind spots:** what ThreatAware can't see, so nothing gets missed.

## Latest advisories

> **[HTTP2Shell: find affected devices](https://docs.threataware.com/advisories/http2shell.md)**
>
> **22 October 2026 · Critical.** Brotli decoder flaw (CVE-2026-111497, also called Node2Shell) in Node.js, Python HTTP clients, .NET and more, which can lead to remote code execution. Find the servers your scanner is missing and spot likely installs.

> **[PHP2Shell: find affected devices](https://docs.threataware.com/advisories/php2shell.md)**
>
> **21 October 2026 · Critical.** Two PHP runtime flaws (CVE-2026-109618, CVE-2026-109619) exploited from day one. Find the servers your scanner is missing and spot likely PHP installs.

Need help applying an advisory to your tenant? Contact your Customer Success Manager.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.