Aqua Cloud Native Blog › Categories: CLOUD ATTACKS

Updated: October 29th, 2026 TL;DR: The HTTP2Shell vulnerability (CVE-2026-111497) is a critical flaw in Google’s Brotli decompression decoder that could allow attackers to corrupt memory and potentially execute malicious code. With a CVSS v4.0 score of 9.2, the vulnerability affects software beyond Node.js, creating potential exposure across cloud native applications and their dependencies. Security teams …

TL;DR: PHP2Shell comprises two critical vulnerabilities that can allow unauthenticated attackers to execute code on affected PHP installations. Security researchers have reported exploitation attempts, and the vulnerabilities may also expose sensitive information from PHP worker memory. Aquasec’s platform and services are not affected by PHP2Shell, but customers running PHP applications may have vulnerable workloads in …

The complexity of cloud environments means that there is a virtually infinite list of potential security risks and vulnerabilities that could arise within cloud infrastructure or workloads. That said, some cloud security threats are more prevalent than others – and knowing which risks and vulnerabilities are trending is key to knowing what to prioritize when …