CVE-2026-111497

9 SitRep stories cite CVE-2026-111497, newest first. The record itself is at cve.org.

1. Tuesday, November 10, 2026Cisco Details Node.js and Brotli VulnerabilitiesCVE-2026-111497 · CVE-2026-105482 · CVE-2026-105483 · CVE-2026-106069 · fixes released October 21, 2026
2. Monday, November 9, 2026CVE Program Records Brotli Decoder FlawCVE-2026-111497 · out-of-bounds write · CVSS 9.2
3. Friday, November 6, 2026Cisco Warns of Node.js and Brotli FlawsCVE-2026-111497 · CVE-2026-105482 · CVE-2026-105483 · CVE-2026-106069
4. Thursday, November 5, 2026Cisco Advises on Node.js and Brotli FlawsFour CVEs · Cisco products under investigation · No workarounds available
5. Monday, November 2, 2026 · Horizon editionMicrosoft Releases .NET Updates for Brotli VulnerabilityCVE-2026-111497 · .NET 8, 9 and 10 updates · .NET 11 RC3
6. Saturday, October 31, 2026 · Weekend editionMicrosoft Details Brotli Decoder Buffer Overflow
7. Saturday, October 31, 2026Brotli Decoder Overflow Affects Palo Alto PAN-OSPAN-OS 10.2–12.2 mitigations and Google Brotli 1.0.3–1.2.0
8. Thursday, October 29, 2026Brotli Decoder Buffer Overflow Risks PAN-OS DataplaneCVE-2026-111497
9. Tuesday, October 27, 2026Google Brotli Decoder Flaw Enables Remote Code ExecutionCVE-2026-111497 · Affects multiple runtimes and clients