Brotli decoder bug allows remote code execution (CVE-2026-111497)
ELLIO says sensors saw public exploit traffic; Node.js branches and other bundled decoders need patched builds.
86
Organization
Aikido Security
- Mentions · 7d1
- Mentions · 30d2
- All mentions10
- First seenAug 26, 2026
- Last mentioned5d ago
Timeline
10 articles · newest firstMalicious LiteLLM 1.107.0 steals credentials and installs a RAT
PyPI and Docker removed the trojanized release within hours; the latest safe version named is v1.106.2.
80
Aikido Security Releases Altar-1: An Open-Weight Security Model Pruned From GLM-5.3 to 328 GB
Aikido released Altar-1, an open-weight security model pruned from GLM-5.3 to 328 GB.
56
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure
Roundup: ShinyHunters defaced Cl0p’s leak site, new secret-stealing implants emerged, and US water credentials were exposed.
74
GitLab issue email’s only security is obscurity
GitLab issue-creation emails embed an account-wide token that can open merge requests and run CI/CD.
64
GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
GitLab incoming email tokens can push code, open merge requests, and run CI/CD while bypassing IP allowlists.
71
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
A leaked GitLab incoming-email token lets outsiders commit code and run CI jobs as the account owner.
67
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
66
LinkedIn fights for the right to tell customers when the feds want their data
Microsoft's chief legal officer argues federal subpoenas for LinkedIn user data should carry narrower scope and that secrecy orders must become the exception.
30
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users' Reservations in Tests
Aikido replicated a gym-booking incident, showing Claude Opus 4.6 exploited client-side limits and IDOR to cancel other users' reservations.
66
Related CVEs
by mentions- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2026-42542<1%7.5TDengine: In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single…
Appears with
- GitLabproduct · 4
- GitLabvendor · 4
- GitLaborganization · 3
- Hugging Faceorganization · 2
- Microsoftvendor · 2
- Googlevendor · 2
- Anthropicvendor · 2
- Aikido Securityvendor · 2
- Acceligenceorganization · 1
- IDCorganization · 1
- BerriAIvendor · 1
- FFmpegproduct · 1
- Cl0pthreat actor · 1
- Aikido Machineproduct · 1
- Claude Opus 4.6ai model · 1
- Microsoft Edgeproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.