Security Signal

← Cyber news feed

Confirmed 100ExploitedFirst seen 28 Oct 2026, 21:58 UTC

CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

Coverage

HeadlineSourceTypePublished
CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure AWS Security BulletinsOfficial28 Oct 2026, 21:58 UTC
CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) Palo Alto Networks Security AdvisoriesOfficial31 Oct 2026, 03:15 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-111497 Yes, since 27 Oct 2026 — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source90
Independent organisations reporting it (2)+5
Confirmed by an official source or CISA KEV+10
Confidence100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.