Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH030

LH030 reads: 26 October 2026

Read at 06:34 UTC (label 2026-10-26T0634Z)

No class changed against the 18:33 read of 25 October (read log); still no record for CVE-2026-115560 at any tracker (CVE.org, OSV, Debian, Ubuntu, Red Hat and SUSE return 404; NVD's response has no record). Every extracted snippet is identical, so the IV decisions carry over (copied into this read's hand_iv.json). Written by the scheduled daily run.

Read at 12:35 UTC (label 2026-10-26T1230Z, amendment 1)

No class changed (read log). Ubuntu's record timed out at this read (no response in 25 seconds), so its state is unknown here, not a change; every other tracker still holds no record for CVE-2026-115560. Snippets identical, IV decisions carried over. Written by the intraday scheduled run.

Read at 18:34 UTC (label 2026-10-26T1830Z, amendment 1)

No class changed (read log); still no record for CVE-2026-115560 at any tracker that answered (Ubuntu's timed out again, unknown at this read). PHP's news archive has a new entry above the 23 October notice, first seen at this read (18:34:24 UTC; absent at 12:35): "26 Oct 2026 Updated PHP Windows builds for Brotli security fix". It says, in substance: updated Windows builds PHP 8.5.12-1, 8.4.27-1, 8.3.36-1 and 8.2.35-1 include Brotli 1.2.1, which fixes CVE-2026-111497, "an out-of-bounds write vulnerability in Brotli decompression"; in PHP Windows builds the vulnerable decoder "can be reached through the cURL extension when automatic HTTP response decompression is enabled", which is off by default in cURL; the -1 suffix marks a Windows package rebuild with updated dependencies, and "the PHP runtime versions remain unchanged". It names neither CVE-2026-115560 nor the October flaws, so the page's classes, read for the 23 October instruction, are unchanged; the IV snippets are identical and the decisions carry over. Recorded as context, not flagged: it is a separate dependency fix in Windows packages, not PHP's next regular release or the CVE-2026-115560 advisory. Written by the intraday scheduled run.

From studies/LH030/checkpoints/2026-10-26.md in the repository, last changed 26 October 2026.