PHP2Shell, LiteLLM, GitLab: Find What You Need to Patch

Multiple critical security vulnerabilities were disclosed between October 16-23, 2026, affecting PHP (CVE-2026-109618/109619), Node.js (CVE-2026-111497), GitLab (CVE-2026-110264 rated CVSS 10.0), and LiteLLM 1.107.0, with fixes released on October 21. The challenge for organizations extends beyond patching: they must identify all affected instances across their infrastructure, determine internet exposure, assess what resources those instances can access, and locate any associated credentials or certificates. Organizations without a trusted inventory face significant time constraints to locate and secure vulnerable systems before attackers exploit them.