Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
2026-10-24T19:23:59Z•08da42919faa0223fbb6a71645fdd2cd94589d9628a934f445e77d842928ffe4
CVE-2026-109618CVE-2026-109619CVE-2026-110447CVE-2026-111497CVE-2026-112900CVE-2026-115560AI agentsAPT41Arista VeloCloudBrotliBunCISA KEVCollabora OnlineGitLabNode.jsPHPPillowPythonSandwormSecure BootUEFI bootkitVPNactively exploited vulnerabilitiescredential theftfirewallsmalicious packagememory corruptionransomwareremote code executionsupply-chain compromisezero-day
What happened
The feed highlights multiple critical cybersecurity developments, including actively exploited vulnerabilities, remote-code-execution flaws, supply-chain compromises, credential exposure, ransomware activity, and attacks against enterprise edge devices. Key issues include the Brotli decoder flaw CVE-2026-111497 affecting Node.js and other software, actively exploited Collabora Online and Arista VeloCloud vulnerabilities, PHP2Shell exploitation attempts, Pillow EPS command execution, GitHub token theft leading to a malicious LiteLLM release, and UEFI bootkit activity attributed to a China-al���
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 08da42919faa0223fbb6a71645fdd2cd94589d9628a934f445e77d842928ffe4
- Enrichment time
- 2026-10-24T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.