Security1 hOctober 28, 2026, 17:05

CISA adds Google Brotli and Adobe Commerce flaws to exploited vulnerabilities catalog

CISA added two critical flaws to its Known Exploited Vulnerabilities catalog: CVE-2026-111497 (CVSS 9.2) in Google Brotli and CVE-2026-48356 (CVSS 9.3) in Adobe Commerce and Magento. Federal agencies must patch them by October 29, 2026.

Security Affairs

Open source

CISA adds Google Brotli and Adobe Commerce flaws to exploited vulnerabilities catalog

CVE-2026-111497 in Brotli (CVSS 9.2) can corrupt decoder memory and enable code execution
CVE-2026-48356 in Adobe Commerce and Magento (CVSS 9.3) is an unrestricted file upload flaw
Wiz: 91% of cloud environments contain resources vulnerable to the Brotli flaw
PolyShell attacks infected at least 953 online stores

#Google#Adobe#Magento#CISA

CVE-2026-75650: critical RCE in Adobe Commerce and Magento exploited in the wild

Security

When the Payment-Failure Email Is the Exploit: Inside the Magento Template Rendering Chain of CVE-2026-75650

Security

CISA adds Plex Media Server SSRF to exploited vulnerabilities catalog

Security

CISA adds Google Brotli and Adobe Commerce flaws to exploited vulnerabilities catalog

CVE-2026-75650: critical RCE in Adobe Commerce and Magento exploited in the wild

When the Payment-Failure Email Is the Exploit: Inside the Magento Template Rendering Chain of CVE-2026-75650

CISA adds Plex Media Server SSRF to exploited vulnerabilities catalog

CVE-2016-3081 in Apache Struts added to CISA's exploited vulnerabilities catalog