CVE-2026-111497

🗓️ 22 Oct 2026 13:35:41Reported by GoogleType

cve🔗 web.nvd.nist.gov📰️ 116 Media mentions👁 1747 Views

Unauthenticated remote out-of-bounds write in Google Brotli decoder allows RCE or DoS.

Reporter	Title	Published	Views	Family All 1000
GithubExploit	Exploit for CVE-2026-111497	26 Oct 202613:10	–	githubexploit
GithubExploit	Exploit for Unchecked Return Value in Google Brotli	2 Nov 202608:55	–	githubexploit
GithubExploit	Exploit for CVE-2026-111497	24 Oct 202622:05	–	githubexploit
GithubExploit	Exploit for CVE-2026-111497	25 Oct 202604:22	–	githubexploit
GithubExploit	cve-feed	28 Oct 202619:42	–	githubexploit
GithubExploit	Exploit for CVE-2026-111497	22 Oct 202608:52	–	githubexploit
GithubExploit	Exploit for CVE-2026-111497	24 Oct 202610:02	–	githubexploit
GithubExploit	Exploit for CVE-2026-111497	22 Oct 202604:08	–	githubexploit
GithubExploit	Exploit for CVE-2026-111497	25 Oct 202609:36	–	githubexploit
GithubExploit	Exploit for Unchecked Return Value in Google Brotli	28 Oct 202622:44	–	githubexploit

NVD

Vulners

Vulnrichment

Node

google brotliRange1.0.3–1.0.10-

google brotliRange1.1.0–1.1.1-

google brotliRange1.2.0–1.2.1-

Node

nodejs node.jsRange<22.23.4-

nodejs node.jsRange23.0.0–24.22.1-

nodejs node.jsRange25.0.0–26.12.1-

Node

python-hyper brotlicffiRange<1.2.1.0python

Node

microsoft .netRange8.0.0–8.0.33

microsoft .netRange9.0.0–9.0.22

microsoft .netRange10.0.0–10.0.14

microsoft .netMatch11.0.0preview1

microsoft .netMatch11.0.0preview2

microsoft .netMatch11.0.0preview3

microsoft .netMatch11.0.0preview4

microsoft .netMatch11.0.0preview5

microsoft .netMatch11.0.0preview6

microsoft .netMatch11.0.0preview7

microsoft .netMatch11.0.0rc1

microsoft .netMatch11.0.0rc2

Node

debian debian_linuxMatch12.0

Node

istio istioRange<1.29.9

istio istioRange1.30.0–1.30.6

istio istioRange1.31.0–1.31.2

Node

anthropic bunRange<1.4.4

Node

envoyproxy envoyRange<1.37.8

envoyproxy envoyRange1.38.0–1.38.6

envoyproxy envoyRange1.39.0–1.39.3

Node

tianocore edk2Range≤202608

Node

google woff2Match-

Node

duckdb duckdbRange≤2.0.0

Node

clickhouse clickhouseRange≤26.10.2.103

Node

apache arrowRange≤26.0.0

apache arrowMatch27.0.0dev

Node

mcmilk 7-zip-zstdRange≤26.02-1.5.7-r2

Node

7-zip p7zipRange≤16.02

Node

andybalholm brotliRange<1.2.7go

Node

AND

siemens ruggedcom_ape1808_firmwareMatch-

siemens ruggedcom_ape1808Match-

Node

siemens common_configuratorMatch-

siemens data_flow_monitoringRange<3.0.18

siemens dataxess_configuratorRange<1.5.7

siemens edge_opc_ua_server_configuratorRange<2.3.10

siemens flow_creator_configuratorRange<1.15.1

siemens industrial_edge_cloud_connector_configuratorRange<1.24.3

siemens industrial_edge_databus_configuratorRange<4.0.1

siemens industrial_edge_hubMatch-

siemens industrial_edge_management_cloudMatch-

Node

siemens comos_walkinsideMatch-

siemens simatic_braumatMatch8.2update1

siemens simatic_braumatMatch8.2update2

siemens simatic_braumatMatch8.2update3

siemens simatic_braumatMatch8.2update4

siemens simatic_braumatMatch8.2update5

siemens simatic_profiling_toolMatch-

siemens simatic_sistarMatch8.2update1

siemens simatic_sistarMatch8.2update2

siemens simatic_sistarMatch8.2update3

siemens simatic_sistarMatch8.2update4

siemens simatic_sistarMatch8.2update5

siemens simatic_winccRange7.0–8.2

siemens simatic_wincc_companionMatch--

siemens simatic_wincc_runtimeMatch-professional

siemens simatic_wincc_unified_for_industrial_edgeMatch-

siemens simatic_wincc_unified_pc_runtimeMatch-

siemens simatic_wincc_unified_siqenceMatch-

siemens tia_administratorMatch-

siemens tia_project-server_web_administration_toolMatch-

siemens user_management_componentMatch-

Node

siemens hyperlynxMatch-

siemens innexis_architecture_native_accelerationMatch-

siemens insights_hubMatch-

siemens opcenter_connect_electronicsMatch-

siemens opcenter_connect_manufacturing_operations_managementMatch-

siemens opcenter_execution_coreMatch-

siemens opcenter_execution_discreteMatch-

siemens opcenter_execution_foundationMatch-

siemens opcenter_execution_pharmaMatch-

siemens opcenter_execution_processMatch-

siemens opcenter_intelligenceMatch-

siemens opcenter_qualityMatch-

siemens opcenter_rd&lMatch-

siemens opcenter_xMatch-

siemens pads_professionalMatch-essentials

siemens pads_professionalMatch-student

siemens pave360_automotiveMatch2026

siemens process_preparation_xMatch--

siemens simcenter_executable_digital_twinMatch-

siemens simcenter_studioMatch-

siemens teamcenterMatch2412.0

siemens teamcenterMatch2506.0

siemens teamcenterMatch2512.0

siemens teamcenterMatch2606.0

siemens xpedition_designerMatch-

siemens xpedition_enterpriseMatch-

[
  {
    "vendor": "Google",
    "product": "Brotli",
    "packageName": "github.com/google/brotli",
    "repo": "https://github.com/google/brotli",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.3",
        "lessThan": "1.0.10",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.1.0",
        "lessThan": "1.1.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.2.0",
        "lessThan": "1.2.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/october-2026-security-releases
github	www.github.com/andybalholm/brotli/releases/tag/v1.2.7
openwall	www.openwall.com/lists/oss-security/2026/10/24/6
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-443410.html
ellio	www.ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/
openwall	www.openwall.com/lists/oss-security/2026/10/26/16
github	www.github.com/advisories/GHSA-9v8h-qqgm-4m35
openwall	www.openwall.com/lists/oss-security/2026/11/03/2
openwall	www.openwall.com/lists/oss-security/2026/10/26/13
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-898633.html

10 Nov 2026 20:25Current

8.2High risk

Vulners AI Score8.2

CVSS 3.19.8

CVSS 49.2

EPSS0.82641

SSVC

Google Brotli decode.c out-of-bounds write remote unauthenticated RCE DoS