Výsledky hledání

SPOJENO PŘES CVE CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products

Classification: Critical, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: 9.2, CVEs: CVE-2026-111497, Summary: A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to…

EPSS 0.36 CVSS 9.2 CVE-2026-111497 Google Palo Alto Networks Microsoft Node.js Bun Brotli brotlicffi FI US IT CZ FR BE

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tp: dodavatelský řetězec

27. 10. 2026 · zachyceno 04:30 · NCSC-FI · CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products 27. 10. 2026 02:19 · Tenable Research · Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497) 26. 10. 2026 19:45 · Palo Alto PSIRT · CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) 26. 10. 2026 17:27 · BleepingComputer · Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches 26. 10. 2026 14:10 · CSIRT Itálie (ACN) · Google: disponibile PoC per lo sfruttamento della CVE-2026-111497 26. 10. 2026 13:18 · CSIRT.CZ (CZ.NIC) · Kritická zranitelnost Broccoli2Shell ohrožuje aplikace využívající HTTP 26. 10. 2026 · zachyceno 17:30 · CERT-FR – avis · Vulnérabilité dans les produits Microsoft (26 octobre 2026) 23. 10. 2026 22:45 · Aikido Security · Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)