1. CISA added two actively exploited critical flaws to its KEV catalog, CVE-2026-110447 in Collabora Online CODE Server and a VeloCloud Orchestrator issue, urging immediate patching (thehackernews.com). 2. A Brotli decoder memory-corruption flaw, CVE-2026-111497, enables remote code execution in Node.js, Bun, Python Brotli packages, and Envoy, with a proof-of-concept named Node2Shell demonstrated (thehackernews.com). 3. Attackers attempted to exploit PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 to deploy…