CISA adds exploited Brotli and Adobe Commerce flaws to KEV
Federal agencies must fix CVE-2026-111497 and CVE-2026-48356 by October 29, 2026, after reported exploit traffic and store infections.
1
Stories per day · 30 days
Relatedmagento4adobe-commerce2brotli2cisa-kev1e-commerce1ecommerce1gsocket1javascript1javascript-loader1kev1node2shell1nodejs1sansec1skimmer1web-skimmer1
2 stories, newest first · one card per story
Stories tagged #polyshell
deepveindrilling.com Magento loader found on 83 stores
Sixty of those stores already carried an earlier loader, and a stored payload reruns after the domain is blocked.