CVE-2026-112900 2

Vulnerability (CVE)

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Pillow, the widely used Python image library, has a flaw tracked as CVE-2026-112900 in which it passes an EPS file's name to Ghostscript without checking it, letting an attacker-controlled filename be read as instructions that point to a second file of...

Vulnerabilities & Patching

⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More

Cyber Risks The Hacker News

The PHP Foundation released patches for two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, codenamed PHP2Shell, that could lead to unauthenticated remote code execution. Cloudflare said it detected millions of exploitation attempts...

Vulnerabilities & Patching