CVE-2026-111497

Corroboration timeline

Each row is the first time that source reported this CVE, so the lag column shows how long each took relative to the earliest report. Corroboration across distinct sources is a confidence signal that a single advisory cannot give you.

1. nvd-cve2026-10-22 14:17 UTCfirst report

   CVE-2026-111497 — A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows

2. microsoft-msrc2026-10-25 14:00 UTC+3d

   CVE-2026-111497 Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder

3. rapid7-blog2026-10-26 17:32 UTC+4d

   CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

4. palo-alto-psirt2026-10-26 18:45 UTC+4d

   CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)

5. cisa-kev2026-10-27 00:00 UTC+4d

   CVE-2026-111497 — Google Brotli: Google Brotli Unchecked Return Value Vulnerability

6. tenable-advisories2026-10-27 01:19 UTC+4d

   Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497)

7. sophos-news2026-10-28 00:00 UTC+5d

   ‘Node2Shell’ vulnerability (CVE-2026-111497) in active exploitation

8. splunk-advisories2026-10-28 00:00 UTC+5d

   SVD-2026-1015: Vulnerabilities in Node.js (CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069) on Splunk Products - October 2026

How this page is built

ThreatFilter ingests 52 public threat-intelligence feeds. A page is published here only when at least 3 distinct sources report the same CVE — roughly 0.2% of the CVEs seen. Everything above is derived from those feeds; nothing is hand-written, and the timeline is the raw record of what each source published and when.

See the live advisory feed, the full source list, or the analyst tools.