Skip to content
securitytabs

AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497

MentionsGoogle

Number: AL26-027 Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients.

Summary from Canadian Centre for Cyber Security.

SecurityTabs reportupdated just nowBrotli Decompression Flaw in Node.js and Other Software Under Attack

Explained

The technology and terms in this story. Learn more

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities