Skip to content
securitytabs

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability

Wiz BlogVulnerabilities

Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.

Summary from Wiz Blog.

SecurityTabs reportupdated just nowBrotli Decompression Flaw in Node.js and Other Software Under Attack

Explained

The technology and terms in this story. Learn more

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities