Status: UPDATED | Advisory ID: CVE-2026-111497
| CVE | CVE-2026-111497 |
| CVSS Score / Version | |
| Updated | 2026-10-30 |
| CVSS Vector | |
| CVSS Prose | |
| Affected products | |
| Classified as |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Siemens | RUGGEDCOM APE1808 | ||
| Siemens | Industrial Edge Management Cloud | ||
| Microsoft | .net | ||
| nodejs | node.js | ||
| python-hyper | brotlicffi | ||
| istio | istio | ||
| anthropic | bun | ||
| envoyproxy | envoy | ||
| tianocore | edk2 | ||
| duckdb | duckdb | ||
| clickhouse | clickhouse | ||
| Apache | arrow | ||
| mcmilk | 7-zip-zstd | ||
| 7-zip | p7zip | ||
| andybalholm | brotli | ||
| Siemens | Cloud Connector Configurator | ||
| Siemens | Common Configurator (CC on IEM) | ||
| Siemens | Common Configurator on Device (CC on Edge) | ||
| Siemens | Data Flow Monitoring | ||
| Siemens | Databus Configurator | ||
| Siemens | Edge OPC UA Server Configurator | ||
| Siemens | Flow Creator Configurator | ||
| Siemens | Industrial Edge Hub |
| Subsystems | Industrial Edge, IIoT & Cloud Integration |
| Sectors | Multiple |
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.
Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. (NVD)
Monitor Siemens, Microsoft, nodejs, python-hyper, istio, anthropic, envoyproxy, tianocore, duckdb, clickhouse, Apache, mcmilk, 7-zip, and andybalholm's web pages for any future patch releases. See vendor advisory link below.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-111497 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-111497 |
| Vendor advisory | https://cert-portal.siemens.com/productcert/html/ssa-443410.html |