AI × AEC · CURATED INSIGHT
CISA Adds Exploited Adobe Commerce and Brotli Flaws to KEV Catalog
On October 27, CISA added two actively exploited vulnerabilities in Adobe Commerce and Google's Brotli library to its KEV catalog, requiring federal agencies to apply patches by a set deadline.
According to CISA on October 27, two actively exploited vulnerabilities were added to its KEV catalog: CVE-2026-48356 affecting Adobe Commerce and Magento, and CVE-2026-111497 caused by unchecked return values in Google's Brotli library. Federal agencies must patch both by November 10. Brotli's widespread embedding across software libraries significantly widens the potential exposure surface.
Key takeaways
- CISA listed CVE-2026-48356 and CVE-2026-111497 in KEV on October 27, mandating federal agency remediation by November 10.
- CVE-2026-111497 stems from unchecked return values in Google's Brotli library, drawing scrutiny due to widespread software embedding.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.