Vulnerability-Lookup

CVE-2026-111497 (GCVE-0-2026-111497)

Vulnerability from cvelistv5 – Published: 2026-10-22 13:35 – Updated: 2026-10-28 03:55

CISA

Title

Out-of-Bounds Write in Google Brotli Decoder

Summary

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-23 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write
CWE-252 - Unchecked Return Value

Assigner

Google CNA under the Google root

CNA scorecard B 77/100 over 40 records in the last 180 days details

References

18 references

URL	Tags
https://nodejs.org/en/blog/vulnerability/october-…	patch
https://github.com/andybalholm/brotli/releases/ta…	release-notesthird-party-advisory
https://ellio.tech/en/blog/node2shell-cve-2026-11…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://github.com/advisories/GHSA-9v8h-qqgm-4m35
http://www.openwall.com/lists/oss-security/2026/1…
https://lists.debian.org/debian-lts-announce/2026…
http://www.openwall.com/lists/oss-security/2026/10/24/6
http://www.openwall.com/lists/oss-security/2026/1…
http://www.openwall.com/lists/oss-security/2026/1…
https://www.aikido.dev/blog/node2shell-nodejs-bro…
https://broccoli2shell.com
https://github.com/dotnet/announcements/issues/494
https://github.com/google/brotli/releases/tag/v1.2.1
https://github.com/google/brotli/releases/tag/v1.1.1
https://github.com/google/brotli/releases/tag/v1.0.10
https://patchtheplanet.org/brotli
http://www.openwall.com/lists/oss-security/2026/1…

Impacted products

1 product

Vendor	Product	Version	CPE status
Google	Brotli	Affected: 1.0.3 , < 1.0.10 (semver) Affected: 1.1.0 , < 1.1.1 (semver) Affected: 1.2.0 , < 1.2.1 (semver)	guessed

Date Public

2026-02-27 07:50

Credits

OpenAI Codex Security - Khai Tran and Sylvie Mayer

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

KEV entry ID: ea1662ce-1e27-4e77-bd1a-fbcdcd086e4d

Vulnerability ID: CVE-2026-111497

Status: Confirmed

Status Updated: 2026-10-27 00:00 UTC

Exploited: Yes

Timestamps

First Seen: 2026-10-27

Asserted: 2026-10-27

Scope

Notes: Google Brotli Unchecked Return Value Vulnerability | Affected: Google / Brotli | Description: Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. | Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. | Due date: 2026-11-10 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497

Evidence

Type: Vendor Report

Signal: Successful Exploitation

Confidence: 80%

Source: cisa-kev

Details

Cwes	CWE-252 CWE-787
Feed	CISA Known Exploited Vulnerabilities Catalog
Product	Brotli
Due Date	2026-11-10
Date Added	2026-10-27
Vendorproject	Google
Vulnerabilityname	Google Brotli Unchecked Return Value Vulnerability
Knownransomwarecampaignuse	Unknown

References

CVE-2026-111497

Created: 2026-10-27 20:00 UTC | Updated: 2026-10-27 20:00 UTC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-111497",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-28T03:55:48.896Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-10-26T18:10:34.928Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://github.com/advisories/GHSA-9v8h-qqgm-4m35"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/23/25"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/24/6"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/12"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/13"
          },
          {
            "url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497"
          },
          {
            "url": "https://broccoli2shell.com"
          },
          {
            "url": "https://github.com/dotnet/announcements/issues/494"
          },
          {
            "url": "https://github.com/google/brotli/releases/tag/v1.2.1"
          },
          {
            "url": "https://github.com/google/brotli/releases/tag/v1.1.1"
          },
          {
            "url": "https://github.com/google/brotli/releases/tag/v1.0.10"
          },
          {
            "url": "https://patchtheplanet.org/brotli"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/16"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "github.com/google/brotli",
          "product": "Brotli",
          "repo": "https://github.com/google/brotli",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "1.0.10",
              "status": "affected",
              "version": "1.0.3",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.1",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.2.1",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "OpenAI Codex Security - Khai Tran and Sylvie Mayer"
        }
      ],
      "datePublic": "2026-02-27T07:50:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability in the Brotli decoder (\u003ccode\u003ec/dec/decode.c\u003c/code\u003e) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\u003cbr\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.\u003cspan\u003e\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-252",
              "description": "CWE-252 Unchecked Return Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T14:58:42.704Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
        },
        {
          "tags": [
            "release-notes",
            "third-party-advisory"
          ],
          "url": "https://github.com/andybalholm/brotli/releases/tag/v1.2.7"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
            }
          ],
          "value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-Bounds Write in Google Brotli Decoder",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2026-111497",
    "datePublished": "2026-10-22T13:35:41.975Z",
    "dateReserved": "2026-10-16T09:58:17.790Z",
    "dateUpdated": "2026-10-28T03:55:48.896Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-111497",
      "date": "2026-10-28",
      "epss": "0.87988",
      "percentile": "0.99763"
    },
    "microsoft_vex": {
      "current_release_date": "2026-10-26T07:00:00.000Z",
      "cve": "CVE-2026-111497",
      "id": "msrc_CVE-2026-111497",
      "initial_release_date": "2026-10-25T07:00:00.000Z",
      "product_status:fixed": "21",
      "product_status:known_affected": "21",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-111497.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "packageName": "github.com/google/brotli",
                "product": "Brotli",
                "repo": "https://github.com/google/brotli",
                "vendor": "Google",
                "versions": [
                  {
                    "lessThan": "1.0.10",
                    "status": "affected",
                    "version": "1.0.3",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "1.1.1",
                    "status": "affected",
                    "version": "1.1.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "1.2.1",
                    "status": "affected",
                    "version": "1.2.0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "cve-coordination@google.com"
          }
        ],
        "cisaActionDue": "2026-11-10",
        "cisaExploitAdd": "2026-10-27",
        "cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
        "cisaVulnerabilityName": "Google Brotli Unchecked Return Value Vulnerability",
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*",
                    "matchCriteriaId": "8A7BE60F-21B0-4779-8D59-6E5E58C5826B",
                    "versionEndExcluding": "1.0.10",
                    "versionStartIncluding": "1.0.3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*",
                    "matchCriteriaId": "48E72297-AFBD-4460-A732-5A6803CCCDB0",
                    "versionEndExcluding": "1.1.1",
                    "versionStartIncluding": "1.1.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*",
                    "matchCriteriaId": "C8CA5C74-26A8-44E3-B893-1FA01CED49F5",
                    "versionEndExcluding": "1.2.1",
                    "versionStartIncluding": "1.2.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                    "matchCriteriaId": "02348F18-5E17-4427-8B78-63B4082F2FB4",
                    "versionEndExcluding": "22.23.4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                    "matchCriteriaId": "852D09BB-A396-4813-81C9-7D89D5DD5FB6",
                    "versionEndExcluding": "24.22.1",
                    "versionStartIncluding": "23.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
                    "matchCriteriaId": "219CA855-3A40-42CE-BAB6-79CCFEE7746F",
                    "versionEndExcluding": "26.12.1",
                    "versionStartIncluding": "25.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:python-hyper:brotlicffi:*:*:*:*:*:python:*:*",
                    "matchCriteriaId": "E732E75B-4BEF-4D7E-8520-E03B707FB4F6",
                    "versionEndExcluding": "1.2.1.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "65DCE51C-2CD9-4179-9354-5323D28573AA",
                    "versionEndExcluding": "8.0.33",
                    "versionStartIncluding": "8.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "98654489-8C4E-4801-8728-29B01A22DEED",
                    "versionEndExcluding": "9.0.22",
                    "versionStartIncluding": "9.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "27DF5CF4-58E3-4F01-A3AA-D44B7DCC3D67",
                    "versionEndExcluding": "10.0.14",
                    "versionStartIncluding": "10.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview1:*:*:*:*:*:*",
                    "matchCriteriaId": "5DACF2FE-CF61-43E4-8A3F-F7A358DE8A01",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview2:*:*:*:*:*:*",
                    "matchCriteriaId": "280B2E64-3163-40AB-A048-14D58DEC42FD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview3:*:*:*:*:*:*",
                    "matchCriteriaId": "12357908-3294-46EF-85A0-DA3F86C97489",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview4:*:*:*:*:*:*",
                    "matchCriteriaId": "849FC8F5-86CD-4B5D-ADFD-9CB16EA75D09",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview5:*:*:*:*:*:*",
                    "matchCriteriaId": "C86E87E2-B236-4AC9-B6C3-64B9CDEC91EB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview6:*:*:*:*:*:*",
                    "matchCriteriaId": "9B14656E-2BB0-4B4B-B518-F3D5108253ED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:preview7:*:*:*:*:*:*",
                    "matchCriteriaId": "E09C9DB3-F42C-4442-9CF0-24A780D094C8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "67035E86-61F5-421E-B243-EF64458AD8BA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:microsoft:.net:11.0.0:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "C46300CA-BA84-48B3-85C5-C20CB487C733",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "46D69DCC-AE4D-4EA5-861C-D60951444C6C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9F01FA9D-7190-431F-84DD-24D4EBC41A2D",
                    "versionEndExcluding": "1.29.9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B8DE25CE-AFCB-4685-9836-B8EC9C820975",
                    "versionEndExcluding": "1.30.6",
                    "versionStartIncluding": "1.30.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55EBE231-2EB8-4C9C-B279-D07F82EA5B55",
                    "versionEndExcluding": "1.31.2",
                    "versionStartIncluding": "1.31.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:anthropic:bun:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "51DD72B3-85F6-4B10-AEB4-41E0679ED0AA",
                    "versionEndExcluding": "1.4.4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8EE6278D-A48A-427C-8A7E-1D4103E2ADF7",
                    "versionEndExcluding": "1.37.8",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDCA301F-83CA-4DDB-AAE4-24D5235EE2D5",
                    "versionEndExcluding": "1.38.6",
                    "versionStartIncluding": "1.38.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B9A47DD3-2655-4722-9B9D-3888B590C82F",
                    "versionEndExcluding": "1.39.3",
                    "versionStartIncluding": "1.39.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4CFCBFB-4A38-481B-93AE-7D86CCDC6FB5",
                    "versionEndIncluding": "202608",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:google:woff2:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6D1FC23A-20F7-48F7-ABB8-8D37903DFB58",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:duckdb:duckdb:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0DFA4F95-92F9-4369-BE42-387520F0765B",
                    "versionEndIncluding": "2.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B40EE389-E2AC-4D86-91B2-79A895470317",
                    "versionEndIncluding": "26.10.2.103",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:apache:arrow:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "46A78CA5-1E4A-4DAA-B40D-387B96C1E2F9",
                    "versionEndIncluding": "26.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:apache:arrow:27.0.0:dev:*:*:*:*:*:*",
                    "matchCriteriaId": "130A7077-7885-43CB-8AFF-B6056D380156",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mcmilk:7-zip-zstd:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FB91A353-9BE9-49E7-86FD-6B5FBB291351",
                    "versionEndIncluding": "26.02-1.5.7-r2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:7-zip:p7zip:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76A26292-08BE-459A-B25A-CA14AF8D3C29",
                    "versionEndIncluding": "16.02",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:andybalholm:brotli:*:*:*:*:*:go:*:*",
                    "matchCriteriaId": "F3E50F12-AEFE-4B4F-B474-3676F145E032",
                    "versionEndExcluding": "1.2.7",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
          }
        ],
        "id": "CVE-2026-111497",
        "lastModified": "2026-10-28T17:47:31.370",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 9.2,
                "baseSeverity": "CRITICAL",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cve-coordination@google.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-111497",
                "options": [
                  {
                    "exploitation": "active"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-23T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-22T14:17:37.190",
        "references": [
          {
            "source": "cve-coordination@google.com",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/andybalholm/brotli/releases/tag/v1.2.7"
          },
          {
            "source": "cve-coordination@google.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2026/10/23/25"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2026/10/24/6"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/12"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/13"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/16"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://broccoli2shell.com"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://github.com/advisories/GHSA-9v8h-qqgm-4m35"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Issue Tracking",
              "Mitigation",
              "Third Party Advisory"
            ],
            "url": "https://github.com/dotnet/announcements/issues/494"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/google/brotli/releases/tag/v1.0.10"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/google/brotli/releases/tag/v1.1.1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Release Notes"
            ],
            "url": "https://github.com/google/brotli/releases/tag/v1.2.1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://patchtheplanet.org/brotli"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "US Government Resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"
          }
        ],
        "sourceIdentifier": "cve-coordination@google.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-252"
              },
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "cve-coordination@google.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-10-28T19:40:50+00:00",
      "cve": "CVE-2026-111497",
      "id": "CVE-2026-111497",
      "initial_release_date": "2026-10-22T13:35:41.975000+00:00",
      "product_status:fixed": "825",
      "product_status:known_affected": "97",
      "product_status:known_not_affected": "168",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "brotli: Out-of-Bounds Write in Google Brotli Decoder",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-111497.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-10-26T18:10:34.928Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "https://github.com/advisories/GHSA-9v8h-qqgm-4m35"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/10/23/25"
              },
              {
                "url": "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/10/24/6"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/10/26/12"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/10/26/13"
              },
              {
                "url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497"
              },
              {
                "url": "https://broccoli2shell.com"
              },
              {
                "url": "https://github.com/dotnet/announcements/issues/494"
              },
              {
                "url": "https://github.com/google/brotli/releases/tag/v1.2.1"
              },
              {
                "url": "https://github.com/google/brotli/releases/tag/v1.1.1"
              },
              {
                "url": "https://github.com/google/brotli/releases/tag/v1.0.10"
              },
              {
                "url": "https://patchtheplanet.org/brotli"
              },
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/10/26/16"
              }
            ],
            "title": "CVE Program Container",
            "x_generator": {
              "engine": "ADPogram 0.0.1"
            }
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-111497",
                    "options": [
                      {
                        "Exploitation": "active"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-27T19:53:21.238552Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-22T19:00:18.440Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "third-party-advisory"
                ],
                "url": "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/"
              },
              {
                "tags": [
                  "government-resource"
                ],
                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "packageName": "github.com/google/brotli",
              "product": "Brotli",
              "repo": "https://github.com/google/brotli",
              "vendor": "Google",
              "versions": [
                {
                  "lessThan": "1.0.10",
                  "status": "affected",
                  "version": "1.0.3",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.1.1",
                  "status": "affected",
                  "version": "1.1.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2.1",
                  "status": "affected",
                  "version": "1.2.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "OpenAI Codex Security - Khai Tran and Sylvie Mayer"
            }
          ],
          "datePublic": "2026-02-27T07:50:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eA buffer overflow vulnerability in the Brotli decoder (\u003ccode\u003ec/dec/decode.c\u003c/code\u003e) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\u003cbr\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.\u003cspan\u003e\u003c/span\u003e\u003c/p\u003e"
                }
              ],
              "value": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-100",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-100 Overflow Buffers"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 9.2,
                "baseSeverity": "CRITICAL",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "CWE-787 Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-252",
                  "description": "CWE-252 Unchecked Return Value",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-27T14:58:42.704Z",
            "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
            "shortName": "Google"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
            },
            {
              "tags": [
                "release-notes",
                "third-party-advisory"
              ],
              "url": "https://github.com/andybalholm/brotli/releases/tag/v1.2.7"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
                }
              ],
              "value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "title": "Out-of-Bounds Write in Google Brotli Decoder",
          "x_generator": {
            "engine": "Vulnogram 1.0.2"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "assignerShortName": "Google",
        "cveId": "CVE-2026-111497",
        "datePublished": "2026-10-22T13:35:41.975Z",
        "dateReserved": "2026-10-16T09:58:17.790Z",
        "dateUpdated": "2026-10-27T19:59:03.370Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

OPENSUSE-SU-2026:12305-1

Vulnerability from csaf_opensuse - Published: 2026-10-27 00:00 - Updated: 2026-10-28 11:19

Summary

python313-Brotli-1.2.1-1.1 on GA media

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2026-111497.

CVE-2026-111497

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 8 products

Open the full advisory

RHSA-2026:90449

Vulnerability from csaf_opensuse - Published: 2026-10-26 00:00 - Updated: 2026-10-28 11:15

Summary

security update for brotli

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2026-111497.

CVE-2026-111497

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 4 products

Open the full advisory

RHSA-2026:90495

Vulnerability from csaf_opensuse - Published: 2026-10-26 00:00 - Updated: 2026-10-28 11:15

Summary

security update for brotli

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2026-111497.

CVE-2026-111497

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 7 products

Open the full advisory

RHSA-2026:90501

Vulnerability from csaf_opensuse - Published: 2026-10-26 00:00 - Updated: 2026-10-28 11:15

Summary

security update for brotli

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2026-111497.

CVE-2026-111497

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 5 products

Open the full advisory

PYSEC-2026-4322

Vulnerability from pysec - Published: 2026-10-23 00:00 - Updated: 2026-10-23 00:00

Details

CVE-2026-111497 ("Node2Shell") is an out-of-bounds write (CWE-787) in Google's Brotli decoder (c/dec/decode.c). DecodeBlockTypeAndLength() returns an ambiguous value for an invalid block switch, and the fast decode path discards it (CWE-252, unchecked return value), so a crafted Brotli stream makes the decoder continue on corrupted state and write past the ring buffer. Upstream rates it CVSS 4.0 9.2 and classifies the impact as potential remote code execution.

The vulnerability is in Google's C library, not in Node.js specifically. The PyPI Brotli package is Google's CPython binding and compiles the same c/dec/decode.c that has the actual vulnerability. All Brotli releases up to and including 1.2.0 ship the vulnerable decoder; 1.2.1 contains the upstream fix (commit 0ed4268a) and differs from 1.2.0 only in that fix plus a version bump.

The decoder is reached whenever untrusted Brotli data is decompressed. With Brotli installed, common HTTP clients decode Brotli responses automatically (urllib3/requests, httpx with the brotli extra, aiohttp) and services that accept Content-Encoding: br request bodies decode inbound data, so the flaw is reachable from attacker-controlled input.

Severity

9.2 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Impacted products

Name	purl
brotli	pkg:pypi/brotli

Aliases

CVE-2026-111497

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "brotli",
        "purl": "pkg:pypi/brotli"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.5.2",
        "0.6.0",
        "1.0.1",
        "1.0.4",
        "1.0.6",
        "1.0.7",
        "1.0.8",
        "1.0.9",
        "1.1.0",
        "1.2.0"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-111497"
  ],
  "details": "CVE-2026-111497 (\"Node2Shell\") is an out-of-bounds write (CWE-787) in Google\u0027s\nBrotli decoder (c/dec/decode.c). DecodeBlockTypeAndLength() returns an ambiguous\nvalue for an invalid block switch, and the fast decode path discards it\n(CWE-252, unchecked return value), so a crafted Brotli stream makes the decoder\ncontinue on corrupted state and write past the ring buffer. Upstream rates it\nCVSS 4.0 9.2 and classifies the impact as potential remote code execution.\n\nThe vulnerability is in Google\u0027s C library, not in Node.js specifically. The\nPyPI `Brotli` package is Google\u0027s CPython binding and compiles the same\nc/dec/decode.c that has the actual vulnerability. All `Brotli` releases up to\nand including 1.2.0 ship the vulnerable decoder; 1.2.1 contains the upstream\nfix (commit 0ed4268a) and differs from 1.2.0 only in that fix plus a version\nbump.\n\nThe decoder is reached whenever untrusted Brotli data is decompressed. With\n`Brotli` installed, common HTTP clients decode Brotli responses automatically\n(urllib3/requests, httpx with the brotli extra, aiohttp) and services that\naccept `Content-Encoding: br` request bodies decode inbound data, so the flaw\nis reachable from attacker-controlled input.\n",
  "id": "PYSEC-2026-4322",
  "modified": "2026-10-23T00:00:00Z",
  "published": "2026-10-23T00:00:00Z",
  "references": [
    {
      "type": "FIX",
      "url": "https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    },
    {
      "type": "WEB",
      "url": "https://opensourcemalware.com/blog/node2shell-affects-python"
    },
    {
      "type": "WEB",
      "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"
    },
    {
      "type": "WEB",
      "url": "https://github.com/google/brotli/releases/tag/v1.2.1"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/Brotli/"
    }
  ],
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Out-of-bounds write in the Brotli decoder (\"Node2Shell\") also affects the PyPI Brotli package"
}

PYSEC-2026-4323

Vulnerability from pysec - Published: 2026-10-23 00:00 - Updated: 2026-10-23 00:00

Details

The vulnerability is in Google's C library, not in Node.js specifically. The PyPI Brotli package is Google's CPython binding and compiles the same c/dec/decode.c that has the original vulnerability. All Brotli releases up to and including 1.2.0 ship the vulnerable decoder; 1.2.1 contains the upstream fix (commit 0ed4268a) and differs from 1.2.0 only in that fix plus a version bump.

The decoder is reached whenever untrusted Brotli data is decompressed. With brotlicffi installed, common HTTP clients decode Brotli responses automatically (urllib3/requests, httpx with the brotli extra, aiohttp) and services that accept Content-Encoding: br request bodies decode inbound data, so the flaw is reachable from attacker-controlled input.

Severity

9.2 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Impacted products

Name	purl
brotlicffi	pkg:pypi/brotlicffi

Aliases

CVE-2026-111497

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "brotlicffi",
        "purl": "pkg:pypi/brotlicffi"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.1.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.8.0",
        "1.0.9.0",
        "1.0.9.1",
        "1.0.9.2",
        "1.1.0.0",
        "1.2.0.0",
        "1.2.0.1",
        "1.2.0.2"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-111497"
  ],
  "details": "CVE-2026-111497 (\"Node2Shell\") is an out-of-bounds write (CWE-787) in Google\u0027s\nBrotli decoder (c/dec/decode.c). DecodeBlockTypeAndLength() returns an ambiguous\nvalue for an invalid block switch, and the fast decode path discards it\n(CWE-252, unchecked return value), so a crafted Brotli stream makes the decoder\ncontinue on corrupted state and write past the ring buffer. Upstream rates it\nCVSS 4.0 9.2 and classifies the impact as potential remote code execution.\n\nThe vulnerability is in Google\u0027s C library, not in Node.js specifically. The\nPyPI `Brotli` package is Google\u0027s CPython binding and compiles the same\nc/dec/decode.c that has the original vulnerability. All `Brotli` releases up to\nand including 1.2.0 ship the vulnerable decoder; 1.2.1 contains the upstream\nfix (commit 0ed4268a) and differs from 1.2.0 only in that fix plus a version\nbump.\n\nThe decoder is reached whenever untrusted Brotli data is decompressed. With\n`brotlicffi` installed, common HTTP clients decode Brotli responses automatically\n(urllib3/requests, httpx with the brotli extra, aiohttp) and services that\naccept `Content-Encoding: br` request bodies decode inbound data, so the flaw\nis reachable from attacker-controlled input.\n",
  "id": "PYSEC-2026-4323",
  "modified": "2026-10-23T00:00:00Z",
  "published": "2026-10-23T00:00:00Z",
  "references": [
    {
      "type": "FIX",
      "url": "https://github.com/google/brotli/commit/0ed4268a4401abcb4472096340477cf4af7d1a2b"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    },
    {
      "type": "WEB",
      "url": "https://opensourcemalware.com/blog/node2shell-affects-python"
    },
    {
      "type": "WEB",
      "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"
    },
    {
      "type": "WEB",
      "url": "https://github.com/google/brotli/releases/tag/v1.2.1"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/brotlicffi/"
    }
  ],
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Out-of-bounds write in the brotlicffi decoder (\"Node2Shell\") also affects the PyPI Brotli package"
}

RHSA-2026:87420

Vulnerability from csaf_redhat - Published: 2026-10-21 22:13 - Updated: 2026-10-27 10:31

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2026-111497.

CVE-2026-111497

A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or potentially arbitrary code execution.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 13 products

https://access.redhat.com/errata/RHSA-2026:87420

Open the full advisory

UBUNTU-CVE-2026-111497 (CVE-2026-111497)

Vulnerability from osv_ubuntu – Published: 2026-10-23 00:00 – Updated: 2026-10-27 22:31 – Source website

CISA

Details

Severity

9.2 (Critical)


                    
                      CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-111497	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-111497	REPORT
	https://nodejs.org/en/blog/vulnerability/october-…	REPORT
	https://ubuntu.com/security/notices/USN-8956-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.0.3-1ubuntu1~16.04.2+esm1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.0.3-1ubuntu1~16.04.2+esm1"
          },
          {
            "binary_name": "python-brotli",
            "binary_version": "1.0.3-1ubuntu1~16.04.2+esm1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.0.3-1ubuntu1~16.04.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.0.3-1ubuntu1~16.04.2+esm1?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.2.0+dfsg-1",
        "0.3.0+dfsg-1",
        "0.3.0+dfsg-2",
        "0.3.0+dfsg-2ubuntu1",
        "1.0.3-1ubuntu1~16.04.1",
        "1.0.3-1ubuntu1~16.04.2",
        "1.0.3-1ubuntu1~16.04.2+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.0.3-1ubuntu1.3+esm1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.0.3-1ubuntu1.3+esm1"
          },
          {
            "binary_name": "python-brotli",
            "binary_version": "1.0.3-1ubuntu1.3+esm1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.0.3-1ubuntu1.3+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.0.3-1ubuntu1.3+esm1?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.6.0-1build1",
        "1.0.2-2",
        "1.0.2-3",
        "1.0.3-1ubuntu1",
        "1.0.3-1ubuntu1.2",
        "1.0.3-1ubuntu1.3",
        "1.0.3-1ubuntu1.3+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.0.7-6ubuntu0.1+esm1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.0.7-6ubuntu0.1+esm1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.0.7-6ubuntu0.1+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.0.7-6ubuntu0.1+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.7-2",
        "1.0.7-2build1",
        "1.0.7-4",
        "1.0.7-5",
        "1.0.7-6",
        "1.0.7-6build1",
        "1.0.7-6ubuntu0.1",
        "1.0.7-6ubuntu0.1+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libnode64",
            "binary_version": "10.19.0~dfsg-3ubuntu1.6+esm2"
          },
          {
            "binary_name": "nodejs",
            "binary_version": "10.19.0~dfsg-3ubuntu1.6+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "nodejs",
        "purl": "pkg:deb/ubuntu/nodejs@10.19.0~dfsg-3ubuntu1.6+esm2?arch=source\u0026distro=esm-apps/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "10.15.2~dfsg-2ubuntu1",
        "10.17.0~dfsg-2ubuntu4",
        "10.17.0~dfsg-2ubuntu6",
        "10.19.0~dfsg-3ubuntu1",
        "10.19.0~dfsg-3ubuntu1.1",
        "10.19.0~dfsg-3ubuntu1.2",
        "10.19.0~dfsg-3ubuntu1.3",
        "10.19.0~dfsg-3ubuntu1.5",
        "10.19.0~dfsg-3ubuntu1.6",
        "10.19.0~dfsg-3ubuntu1.6+esm2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.0.9-2ubuntu0.1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.0.9-2ubuntu0.1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.0.9-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.0.9-2ubuntu0.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.9-2ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.9-2build3",
        "1.0.9-2build4",
        "1.0.9-2build5",
        "1.0.9-2build6"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.1.0-2ubuntu0.1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.1.0-2ubuntu0.1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.1.0-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.1.0-2ubuntu0.1?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.1.0-2ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.9-2build8",
        "1.1.0-1",
        "1.1.0-2~build1",
        "1.1.0-2",
        "1.1.0-2build1",
        "1.1.0-2build2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.2.0-4ubuntu0.1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.2.0-4ubuntu0.1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.2.0-4ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.10",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.2.0-4ubuntu0.1?arch=source\u0026distro=stonking"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.0-4ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.2.0-3build1",
        "1.2.0-4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "brotli",
            "binary_version": "1.2.0-3ubuntu0.1"
          },
          {
            "binary_name": "libbrotli1",
            "binary_version": "1.2.0-3ubuntu0.1"
          },
          {
            "binary_name": "python3-brotli",
            "binary_version": "1.2.0-3ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "brotli",
        "purl": "pkg:deb/ubuntu/brotli@1.2.0-3ubuntu0.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.0-3ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.1.0-2build5",
        "1.1.0-2build6",
        "1.2.0-3",
        "1.2.0-3build1"
      ]
    }
  ],
  "aliases": [],
  "details": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.",
  "id": "UBUNTU-CVE-2026-111497",
  "modified": "2026-10-27T22:31:13Z",
  "published": "2026-10-23T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-111497"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    },
    {
      "type": "REPORT",
      "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8956-1"
    }
  ],
  "related": [
    "USN-8956-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-111497"
  ]
}

WID-SEC-W-2026-4117

Vulnerability from csaf_certbund - Published: 2026-10-21 22:00 - Updated: 2026-10-25 23:00

Summary

Node.js: Mehrere Schwachstellen

Severity

Mittel

Scope

10 vulnerabilities in this advisory, including CVE-2026-111497.

CVE-2026-111497

Known affected: 4 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-111497 (GCVE-0-2026-111497)

CISA

Known Exploited Vulnerability - GCVE BCP-07 Compliant

Timestamps

Scope

Evidence

Vendor Report Successful Exploitation Confidence: 80% Source: cisa-kev

Details

References

UBUNTU-CVE-2026-111497 (CVE-2026-111497)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour