Brotli CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse, and Arrow
JFrog showed crashes, memory corruption, and an endless loop; a full FFmpeg remote code execution exploit was not shown.
68
Organization
Sysdig Threat Research Team
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenSep 20, 2026
- Last mentioned16d ago
Timeline
3 articles · newest firstAI is giving attackers a head start, Microsoft warns
Microsoft's 2026 Digital Defense Report warns attackers are using AI to find bugs, craft malware, and run intrusions faster than defenders.
75
When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain
Sysdig's JADEPUFFER ransomware campaign deployed the ENCFORGE Go binary via Langflow CVE-2025-3248 to encrypt AI models, datasets, and vector stores for destruction-based extortion.
75
Related CVEs
by mentions- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
Appears with
- CISAorganization · 1
- ENCFORGEproduct · 1
- Anthropicorganization · 1
- JADEPUFFERthreat actor · 1
- JFrogorganization · 1
- Hugging Faceorganization · 1
- pyarrowproduct · 1
- Apache Arrowproduct · 1
- Sysdigvendor · 1
- libjxlproduct · 1
- Brotliproduct · 1
- Microsoftvendor · 1
- ENCFORGEmalware · 1
- .NETproduct · 1
- Microsoftorganization · 1
- Googlevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.