ELLIO

Mentions · 7d5
Mentions · 30d6
All mentions6
First seenOct 22, 2026
Last mentioned1d ago

Timeline

6 articles · newest first

CISA catalogs actively exploited Node.js Brotli RCE CVE-2026-111497

Agencies must remediate by November 10; Node.js fixes are 22.23.4, 24.22.1 and 26.12.1.

GBHackersupdated Oct 30, 09:53 UTC · 15h agofirst Oct 29, 06:39 UTC · 1d agoExploit / PoCExploited9 sourcesCVE-2026-1114971

CISA lists exploited Node2Shell flaw CVE-2026-111497

Federal agencies must fix it by November 10; patched Node.js releases are 22.23.4, 24.22.1 and 26.12.1.

Cyber Security Newsupdated Oct 30, 09:53 UTC · 15h agofirst Oct 28, 11:57 UTC · 2d agoExploit / PoCExploited9 sourcesCVE-2026-1114976

CISA lists Brotli Node2Shell flaw as honeypots log attempts

CVE-2026-111497 hits Brotli 1.0.3 through 1.2.0; US civilian agencies must address it by November 10.

SecurityWeekOct 28, 08:37 UTC · 2d agoExploit / PoCExploited30 sourcesCVE-2026-1114972

CISA adds exploited Adobe Commerce and Brotli flaws to KEV

PolyShell has hit hundreds of stores since at least July 2025; Brotli exploit traffic is also being seen.

The Hacker Newsupdated Oct 28, 10:05 UTC · 2d agofirst Oct 28, 05:42 UTC · 2d agoExploit / PoCExploited10 sourcesCVE-2026-111497 CVE-2026-483561

Brotli decoder bug allows remote code execution (CVE-2026-111497)

ELLIO says sensors saw public exploit traffic; Node.js branches and other bundled decoders need patched builds.

Help Net Securityupdated Oct 28, 08:37 UTC · 2d agofirst Oct 27, 17:38 UTC · 3d agoExploit / PoCExploited30 sourcesCVE-2026-1114973 · 1 read

Amazon says PHP2Shell was probed before disclosure and is now exploited

Fixes are PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12; PHP 8.1 and earlier get no official patches.

Infosecurity Magazineupdated Oct 22, 10:22 UTC · 8d agofirst Oct 22, 10:10 UTC · 8d agoExploit / PoCExploited3 sourcesCVE-2026-109618 CVE-2026-1096192 · 1 read

Related CVEs

by mentions

CVE-2026-11149783%9.2
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
published 8d agoGoogle BrotliKEVPoC ×25
CVE-2026-4835645%9.3
Unrestricted dangerous file upload in Adobe Commerce and Magento
published Jul 14, 2026Adobe CommerceKEV
CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25

Appears with

Googlevendor · 5
Brotliproduct · 5
CISAorganization · 4
Bunproduct · 3
Node.jsproduct · 3
Wizorganization · 3
Impervaorganization · 3
OpenAIorganization · 2
Previdianorganization · 2
Node.jsvendor · 2
Tenableorganization · 2
Istioproduct · 2
Beelzebuborganization · 1
Dutch National Cyber Security Centreorganization · 1
Recorded Futureorganization · 1
PAN-OSproduct · 1

Entities are extracted by the model from each article. First seen Oct 22, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.