Intelligence online17 sources monitored11 actively exploited 7d39 published 24hChecked recently
Product

Brotli

Made by Google. 1 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48356) is being actively exploited, CISA warns

CISA added CVE-2026-48356 (Adobe Commerce and Magento) to its Known Exploited Vulnerabilities catalog on October 27, 2026, which means there is reliable evidence of exploitation in the wild. Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control…

Why it matters

CISA lists this as exploited in the wild. Unpatched Commerce and Magento and Brotli systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 2 sources
EnterpriseSecurity pros
CriticalAct nowExploitedCISA KEV

Google Brotli Unchecked Return Value Vulnerability (CVE-2026-111497) is being actively exploited, CISA warns

CISA added CVE-2026-111497 (Google Brotli) to its Known Exploited Vulnerabilities catalog on October 27, 2026, which means there is reliable evidence of exploitation in the wild. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute…

Why it matters

CISA lists this as exploited in the wild. Unpatched affected systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited VulnerabilitiesSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Severity raisedUpdateKEV

    UPDATE: severity raised to critical: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48356) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  2. AdvisoryKEV

    Google Brotli Unchecked Return Value Vulnerability (CVE-2026-111497) is being actively exploited, CISA warns

    Basis: CISA Known Exploited Vulnerabilities (government advisory)

  3. Added to CISA KEVUpdateCVE-2026-111497

    CVE-2026-111497 added to CISA KEV: Google Brotli, Google Brotli Unchecked Return Value Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-111497CVSS 9.2

Google Brotli

Google Brotli Unchecked Return Value Vulnerability

Added Oct 27, 2026Fed. due Nov 10, 2026Coverage →