ClickHouse

Mentions · 7d3
Mentions · 30d4
All mentions8
First seenSep 9, 2026
Last mentioned3d ago

Timeline

8 articles · newest first

Brotli decoder bug allows remote code execution (CVE-2026-111497)

ELLIO says sensors saw public exploit traffic; Node.js branches and other bundled decoders need patched builds.

Help Net Securityupdated Oct 28, 08:37 UTC · 2d agofirst Oct 27, 17:38 UTC · 3d agoExploit / PoCExploited30 sourcesCVE-2026-1114973 · 1 read

Google Brotli decoder CVE-2026-111497 can yield remote code execution

Google scored it 9.2; major runtimes have fixes, but some projects had not shipped a fixed release as of October 26.

Tenable Blogupdated Oct 28, 08:37 UTC · 2d agofirst Oct 27, 01:19 UTC · 4d agoVulnerability 30 sourcesCVE-2026-1114971

Brotli CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse, and Arrow

JFrog showed crashes, memory corruption, and an endless loop; a full FFmpeg remote code execution exploit was not shown.

Cyber Security Newsupdated Oct 28, 08:37 UTC · 2d agofirst Oct 26, 06:35 UTC · 4d agoVulnerability 30 sourcesCVE-2026-1114971

Rewinding the exponential: How we keep hardware usage down

Cloudflare details pipeline changes that deferred about 2.5 years of hardware growth.

Cloudflare BlogOct 13, 15:51 UTC · 17d agoIndustry4 · 2 reads

16-Year-Old Researcher Discovers Microsoft Authentication Bug Exposing 17.3 Trillion Records

A teenage researcher found Microsoft Titan accepted unsigned JWTs, enabling admin SQL against huge internal analytics stores.

GBHackersSep 28, 05:36 UTC · Sep 28, 2026Vulnerability3 · 3 reads

16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records

A teenage researcher found Microsoft Titan accepted unsigned JWTs, potentially reaching an estimated 17.3 trillion stored rows.

Cyber Security NewsSep 26, 03:55 UTC · Sep 26, 2026Vulnerability2 · 2 reads

Now everyone can put data to work

OpenAI launched a Data agent in ChatGPT Work that connects to enterprise warehouses and builds shareable analysis dashboards without SQL.

OpenAI NewsSep 10, 15:00 UTC · Sep 10, 2026AI industry2 · 2 reads

Every Millisecond Counts

Engineers describe four months of ClickHouse optimizations that cut a 85.7-second analytics dashboard query to sub-second latency.

Hacker News · securitySep 9, 16:57 UTC · Sep 9, 2026Other HN 20 points · 1 comments3 · 1 read

Related CVEs

by mentions

CVE-2026-11149783%9.2
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
published 8d agoGoogle BrotliKEVPoC ×25

Appears with

Microsoftvendor · 5
Googlevendor · 4
.NETproduct · 3
Apache Arrowproduct · 3
FFmpegproduct · 3
Brotliproduct · 3
Envoy Proxyproduct · 2
Bunproduct · 2
JFrogorganization · 2
Microsoftvictim · 2
Istioproduct · 2
Titanproduct · 2
Tenableorganization · 2
Node.jsproduct · 2
Microsoft Security Response Centerorganization · 2
Logfwdrproduct · 1

Entities are extracted by the model from each article. First seen Sep 9, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.