CISA Adds Brotli CVE-2026-111497 to Vulnerabilities with Recorded Exploitation
CISA added Brotli CVE-2026-111497 to the KEV catalog, which records its exploitation. Fixes have been released by the upstream project and Node.js for supported branches.
Tag Brotli
Updated: Palo Alto Networks Releases Some PAN-OS Fixes for Brotli Vulnerability
Palo Alto Networks has made six PAN-OS hotfixes available for CVE-2026-111497. For three additional branches, the vendor continues to list ETA dates.
Imperva Demonstrates RCE Through the Node2Shell Flaw in Node.js
Imperva researchers demonstrated remote code execution through CVE-2026-111497 in a vulnerable Node.js image for Linux arm64. Fixes are available in releases 22.23.4, 24.22.1, and 26.12.1.