Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)
Imported from official source
Update October 28: Added a section on how reliable exploitation of CVE-2026-111497 has been so far, based on research from ELLIO and Imperva. Update October 27: CISA added CVE-2026-111497 to its KEV catalog.
This version
- Version
- 3 of 3
- Recorded
- October 28, 2026 18:01
- Change
- Imported change
- Content hash
9513b705c1b19ebd29d9df936ea8a7c2- All versions
- Revision history