Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

CISA adds Adobe Commerce and Google Brotli flaws to KEV

Original title: CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Advisoriesby CISA ()1 min read2 · 2 reads
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

CVE-2026-48356 is an unrestricted upload flaw; CVE-2026-111497 is an unchecked return value bug in Brotli.

CISA added CVE-2026-48356 in Adobe Commerce and Magento and CVE-2026-111497 in Google Brotli to the Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. Binding Operational Directive 26-04 requires federal civilian agencies to prioritize high-risk KEV flaws on publicly exposed assets that grant total control and to check for compromise before patching. CISA urges all organizations to remediate catalog entries; no affected or fixed versions are listed.

Key facts
  • CVE-2026-48356 is unrestricted upload of a file with a dangerous type.
  • CVE-2026-111497 is an unchecked return value vulnerability in Google Brotli.
  • BOD 26-04 applies to Federal Civilian Executive Branch agencies.
  • KEV nominations need a CVE ID, exploitation evidence, and mitigation guidance.
Security assessment · AI, from the articleExploited in the wild

Impact: Active exploitation of upload and Brotli flaws

ProductAffected
Adobe Commerce and Magento—
Google Brotli—
What to do
  1. 1.Prioritize remediation of CVE-2026-48356 and CVE-2026-111497 on exposed assets.
  2. 2.Check whether systems were compromised before the patch was applied.
Analyze CVE-2026-48356 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-48356CVE-2026-111497
ATT&CK
T1190 Exploit Public-Facing Application
Tags
cisakevadobe-commercemagentobrotligoogle
Vendors
AdobeGoogle
Products
Adobe CommerceMagentoBrotli
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-111497
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
9.283%KEVPoC ×25
KEV
CVE-2026-48356
Unrestricted dangerous file upload in Adobe Commerce and Magento
9.345%KEV
KEV

From the original article

1 min read at cisa.gov

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.