Historical version

This is version 2, as it stood on . It is not what this organization currently publishes — read the current version.

Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)

Tenable Version 2 imported change

Imported from official source

Researchers have demonstrated remote code execution through CVE-2026-111497, an out-of-bounds write in Google's Brotli decoder library, and public proofs-of-concept (PoCs) are available. …

This version

Version
2 of 3
Recorded
October 28, 2026 07:01
Change
Imported change
Content hash
da77dfd322132beccb191a5c215f7f52
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.