Back to the CVE list
CVE-2026-1114

Improper access control in Lollms

CVSS score

9.8

EPSS probability

%0.5

Risk score

0.1

Published

6 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Brotli decoder CVE-2026-111497 Mitigation work (Ansible Role)

Public PoCSource updated: 27.10.2026 00:12:00

BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.

Public PoCSource updated: 26.10.2026 22:04:19

PoC / exploit archive for CVE-2026-111497

Public PoCSource updated: 26.10.2026 16:48:01

Cross-platform scanner that finds .NET apps, runtimes and Azure App Service / Functions deployments exposed to CVE-2026-111497 (brotli decoder)

Public PoCSource updated: 26.10.2026 14:09:36

Node2Shell / HTTP2Shell (CVE-2026-111497) exposure-audit kit — read-only scanner + agent prompt pack. Portable: macOS bash 3.2 + Linux. Mutation-tested regression suite, CI on 3 platforms.

Public PoCSource updated: 26.10.2026 12:11:16

tikarammardi/CVE-2026-111497

Public PoCSource updated: 26.10.2026 11:57:57

CVE-2026-111497

Public PoCSource updated: 26.10.2026 21:06:48

CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)

Public PoCSource updated: 27.10.2026 01:50:11

PoC for CVE-2026-111497, a buffer overflow in Google Brotli 1.0.3–1.2.0 that may cause memory corruption, data disclosure, DoS, or RCE when processing crafted compressed data.

Public PoCSource updated: 25.10.2026 20:00:18

Non-invasive Python detector for CVE-2026-111497 with Brotli/Node.js version checks, JSON inventories, and CI-ready reports.

Public PoCSource updated: 25.10.2026 18:43:51

https://huntr.com/bounties/608b2a3b-2225-438e-9e61-ffbfdec2ed89

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-1114"