Attackers target Brotli, Adobe Commerce and Magento vulnerabilities
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Attackers are actively exploiting two flaws: "Broccoli2Shell," a Brotli decoder vulnerability (CVE-2026-111497, affecting versions 1.0.3 through 1.2.0) that lets unauthenticated users inject malicious code, and an Adobe Commerce/Magento unrestricted file upload bug (CVE-2026-48356). CISA has added both to its Known Exploited Vulnerabilities catalog.