Security Signal
Threat intelligence report · last 30 days

"CVE-2026-111497" · Official

Generated 5 Nov 2026, 11:22 UTC · Live view: news.rogelio.cloud/?q=CVE-2026-111497&tier=1

Executive summary

  • 4 stories in the last 30 days; 4 (100%) confirmed by official sources.
  • 4 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (4).
  • Most reported vendor: Google (4 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
4
Stories
4
Actively exploited
0
Breaches & ransomware
4
Confirmed by official sources

Stories per day

1 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 1 stories (1 exploited, 0 breaches/ransomware) F2312026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 1 stories (1 exploited, 0 breaches/ransomware) M2612026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 1 stories (1 exploited, 0 breaches/ransomware) W2812026-10-29: 0 stories (0 exploited, 0 breaches/ransomware) T292026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 1 stories (1 exploited, 0 breaches/ransomware) W412026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Actively exploited — 4 (100%)

Most reported vendors

Google4Adobe1Apple1Arista1Broadcom1Cisco1GitLab1Ivanti1Linux1PHP Group1

Top stories

#StoryConfidenceUpdated
1Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Original article		Confirmed 100
Actively exploited		4 Nov 2026
2PHP2Shell: What to know about two critical PHP flaws
Original article		Confirmed 100
Actively exploited		4 Nov 2026
3CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
Original article		Confirmed 100
Actively exploited		31 Oct 2026
4Node2Shell CVEs
Original article		Confirmed 100
Actively exploited		26 Oct 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-119977WordPress WordPress CoreExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2024-27834Apple Multiple ProductsExploited—0.6%
CVE-2026-111357Ivanti Connect SecureExploited—0.5%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.