Security Bulletins

Stay informed about security updates and advisories for Edgenivo products.

Back to Knowledge Base

Last updated November 3, 2026
Better Auth November 2026 security release
Upgrade Better Auth to 1.7.16 or 1.8.0-beta.5 to address 12 security advisories. Edgenivo WAF protections reduce exposure but do not replace patching.
Last updated November 3, 2026
Name.com domain takeover notice
Name.com is investigating a domain takeover campaign targeting crypto customers. 9 domains originated on Edgenivo have been restored.
Last updated November 1, 2026
Linux kernel security advisory: CVE-2026-98432
Edgenivo has completed application of Linux kernel security updates to address CVE-2026-98432.
Last updated October 28, 2026
Node.js security advisory: Brotli decoder RCE (CVE-2026-111497)
Edgenivo WAF blocks known exploit patterns for CVE-2026-111497, but does not replace patching.
Last updated October 27, 2026
eMudhra security advisory: compromised intermediate CA keys
Edgenivo no longer trusts the compromised eMudhra certificate authorities across its platform. Most projects need no action. Check runtimes and packages you install yourself that carry their own certificate list.
Last updated October 21, 2026
PHP security advisory: php2shell (CVE-2026-109618, CVE-2026-109619)
Edgenivo WAF blocks known php2shell exploit patterns, but does not replace patching. Upgrade PHP to fix CVE-2026-109618 and CVE-2026-109619.
Last updated October 16, 2026
Edgenivo April 2026 security incident
We’ve identified a security incident that involved unauthorized access to certain internal Edgenivo systems.
Last updated December 11, 2025
Security Bulletin: CVE-2025-55184 and CVE-2025-55183
CVE-2025-55184 and CVE-2025-55183 are two important vulnerabilities in React, Next.js, and other frameworks that require immediate action
Last updated December 11, 2025
React2Shell Security Bulletin
CVE-2025-55182 is a critical vulnerability in React, Next.js, and other frameworks that requires immediate action

Security Bulletins

Better Auth November 2026 security release

Name.com domain takeover notice

Linux kernel security advisory: CVE-2026-98432

Node.js security advisory: Brotli decoder RCE (CVE-2026-111497)

eMudhra security advisory: compromised intermediate CA keys

PHP security advisory: php2shell (CVE-2026-109618, CVE-2026-109619)

Edgenivo April 2026 security incident

Security Bulletin: CVE-2025-55184 and CVE-2025-55183

React2Shell Security Bulletin

Security Bulletins

Better Auth November 2026 security release

Name.com domain takeover notice

Linux kernel security advisory: CVE-2026-98432

Node.js security advisory: Brotli decoder RCE (CVE-2026-111497)

eMudhra security advisory: compromised intermediate CA keys

PHP security advisory: php2shell (CVE-2026-109618, CVE-2026-109619)

Edgenivo April 2026 security incident

Security Bulletin: CVE-2025-55184 and CVE-2025-55183

React2Shell Security Bulletin