VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: Bun× téma: dodavatelský řetězec× v celém archivu zrušit filtry

1 karet z 1 položek CZ · EN/orig

· zachyceno

SPOJENO PŘES CVE CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products

Classification: Critical, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 9.2, CVEs: CVE-2026-111497, Summary: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to…

EPSS 0.55 CVSS 9.2 CVE-2026-111497 Google Palo Alto Networks Microsoft Node.js Bun Brotli brotlicffi FI US IT CZ FR BE

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tp: dodavatelský řetězec

· zachyceno · NCSC-FI · CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products · Tenable Research · Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497) · Palo Alto PSIRT · CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) · BleepingComputer · Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches · CSIRT Itálie (ACN) · Google: disponibile PoC per lo sfruttamento della CVE-2026-111497 · CSIRT.CZ (CZ.NIC) · Kritická zranitelnost Broccoli2Shell ohrožuje aplikace využívající HTTP · zachyceno · CERT-FR – avis · Vulnérabilité dans les produits Microsoft (26 octobre 2026) · Aikido Security · Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)