Out-of-Bounds Write in Google Brotli Decoder
CVSS score
9.2
EPSS probability
—
Risk score
0.9
Published
4 h ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Security Ways for AI coding agents. First member audits Node.js repos for the Oct 21, 2026 security release (CVE-2026-111497 Brotli RCE) and opens a patch PR only if affected.
CVE-2026-111497: Node.js Brotli decoder OOB write — analysis, PoC, Docker lab
Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness
AdapptOnAzure/cve-2026-111497-mitigation
Agent skill + zero-dependency script: check a Node.js project against the Oct 2026 Node.js security release (Brotli RCE CVE-2026-111497 and 9 more) and bump version pins to the patched release
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-111497"