Security Advisories & Zero-Day Notices
-
HTTP2Shell: CVE-2026-111497 | Detection in Aqua Enforcer and remediation
Learn how to review CVE-2026-111497 findings in Aqua Enforcer images and plan remediation. Applies to: Aqua Security customers with CVE-2026-111497 reporte...
Thu, 29 Oct, 2026 at 11:04 AM -
emudhra CA Hack - Determining vulnerable Certificates
The below Script should be saved as a .rego file and uploaded to the Open the Aqua CSP platform and navigate to Workload Protection -> Policies -&g...
Mon, 26 Oct, 2026 at 5:07 PM -
PHP2Shell: Identify affected PHP workloads and apply Aqua runtime protection
Learn how to identify potentially vulnerable PHP workloads, reduce exposure using Aqua Security runtime controls, and remediate affected container images. ...
Thu, 22 Oct, 2026 at 11:13 AM -
Shai-Hulud 2.0 Supply-Chain Attack
Update Status: This KB is actively maintained by Aqua Security. Updates will be added as new information, indicators, or mitigation steps are confirmed. ...
Thu, 27 Nov, 2025 at 10:30 AM