Inlägg taggade med "Azure App Service"

CVE-2026-111497 is an out-of-bounds write in Google's Brotli decoder that Node.js says permits remote code execution, and it reaches Node.js 22, 24 and 26, .NET 8, 9 and 10, and the PyPI Brotli package. Fixes landed on 21, 22 and 25 October 2026, Imperva has a working exploit on Node 24.22.0, Node 20 will never be patched, and this guide covers who patches what in Azure, which code paths decode untrusted Brotli, and a seven-step audit.

PHP2Shell, CVE-2026-109618 and CVE-2026-109619, gives an unauthenticated attacker code execution on any PHP web server below 8.2.35, 8.3.36, 8.4.27 or 8.5.12, and was exploited before the 21 October 2026 patches shipped. Azure App Service on Linux patched its built-in runtimes the same day, Windows App Service PHP will never be patched, and the Front Door and Application Gateway mitigations are off by default. An audit for Azure teams.

Microsoft Ignite BRK116: Deploy AI agents at scale with Azure App Service, AI Foundry, and MCP tools. Built-in observability, governance, security. Hitachi case study shows 73% downtime reduction and 41% cost savings.