Skip to content
NewA calmer, faster ZeroHour
Advisoryhigh

RUGGEDCOM APE1808 PAN-OS affected by Node2Shell Brotli flaw

Original title: Siemens RUGGEDCOM APE1808

CISA Advisoriesby CISA ()3 min read1
Read at cisa.gov
Part of a story covered by 6 sourcesCISA republishes Siemens fixes and gaps for Node2Shell Brotli flawMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

CVE-2026-111497 is a CVSS 9.8 out-of-bounds write in Brotli 1.0.3 through 1.2.0 that can leak memory or run code.

Siemens says RUGGEDCOM APE1808 with Palo Alto Networks PAN-OS is affected by Node2Shell, CVE-2026-111497, a buffer overflow in the Google Brotli decoder. A remote unauthenticated attacker can send a crafted Brotli stream to corrupt decoder state, disclose memory, cause denial of service, or potentially execute code. The product status is known affected for all listed versions. Siemens tells customers to upgrade to the corresponding available PAN-OS version and contact support for patch details.

Unconfirmed: The advisory does not state which PAN-OS builds contain the fix.

Key facts
  • The flaw is CWE-787 with CVSS 3.1 base score 9.8.
  • Fixed Brotli versions named are 1.0.10, 1.1.1, and 1.2.1.
  • The sector listed is critical manufacturing, deployed worldwide.
  • This is a CISA republication of Siemens SSA-898633.
  • Initial Siemens publication date listed is October 30.
Security assessment · AI, from the article

Impact: Memory corruption, disclosure, denial of service, or code execution

ProductAffectedFixed in
Siemens RUGGEDCOM APE1808 with Palo Alto Networks PAN-OSallcorresponding available PAN-OS version
Google Brotli1.0.3 through 1.2.01.0.10 or 1.1.1 or 1.2.1
What to do
  1. 1.Upgrade to the corresponding available PAN-OS version.
  2. 2.Contact customer support for additional patch and update information.
  3. 3.Implement workarounds from Palo Alto Networks' upstream notifications.
Analyze CVE-2026-111497 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-111497
ATT&CK
T1190 Exploit Public-Facing Application
Tags
siemensruggedcompan-osbrotlinode2shellics
Vendors
SiemensPalo Alto NetworksGoogle
Products
RUGGEDCOM APE1808PAN-OSBrotli
Organizations
CISASiemens ProductCERT
Countries
Germany

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-111497
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
9.283%KEVPoC ×25
KEV

From the original article

3 min read at cisa.gov

View CSAF Summary Palo Alto Networks has published information on a vulnerability in PAN-OS related to the Node2Shell vulnerability. This advisory lists the related Siemens Industrial products affected by this vulnerability. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.