{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2026-111497","sourceIdentifier":"cve-coordination@google.com","published":"2026-10-22T14:17:37.190","lastModified":"2026-11-10T20:25:59.130","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."}],"affected":[{"source":"cve-coordination@google.com","affectedData":[{"vendor":"Google","product":"Brotli","defaultStatus":"unaffected","packageName":"github.com/google/brotli","repo":"https://github.com/google/brotli","versions":[{"version":"1.0.3","lessThan":"1.0.10","versionType":"semver","status":"affected"},{"version":"1.1.0","lessThan":"1.1.1","versionType":"semver","status":"affected"},{"version":"1.2.0","lessThan":"1.2.1","versionType":"semver","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"Calibre","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Calibre ICE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Capital","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Cloud Connector Configurator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.24.3","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Common Configurator (CC on IEM)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Common Configurator on Device (CC on Edge)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"COMOS Walkinside","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Data Flow Monitoring","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.0.18","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Databus Configurator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"DataXess Configurator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.5.7","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Designcenter X Essentials","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Desigo CC family V8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Desigo CC family V9","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Edge OPC UA Server Configurator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V2.3.10","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Flow Creator Configurator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V1.15.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"gDAP (gPROMS Digital Application Platform)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Gridscale X DSA","defaultStatus":"unknown","versions":[{"version":"V5.3","lessThan":"V5.4","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Gridscale X PSS®E","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V36.8.0","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Heliox Dual Port 60kW","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Heliox Flex Pro","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"HyperLynx","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Industrial Edge Hub","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Industrial Edge Management Cloud","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Innexis Architecture Native Acceleration 2026","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Insights Hub","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Connect Electronics","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Connect MOM","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Execution Core","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Execution Discrete","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Execution Foundation","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Execution Pharma","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Execution Process","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Intelligence","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Intra Plant Logistics","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter Quality","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter RDnL","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Opcenter X","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"PADS Pro Essentials","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"PADS Pro Student Edition","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"PADS Professional","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Pathway to Learning Engineering","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"PAVE360 Automotive 2026","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Polarion","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Process Preparation X","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Project Server Web Administration Tool","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SICHARGE FLEX","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SICHARGE UC","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Sifinity Go","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Sifinity Setup","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"SIMATIC BRAUMAT","defaultStatus":"unknown","versions":[{"version":"V8.2 Update 1","lessThan":"V8.2 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC Profiling Tool","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC SISTAR","defaultStatus":"unknown","versions":[{"version":"V8.2 Update 1","lessThan":"V8.2 Update 5","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Companion","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC OA V3.20","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V3.20 P17.1","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC OA V3.21","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Runtime Professional","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Unified for Industrial Edge","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Unified PC Runtime","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC Unified SIQENCE","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC WinCC V7/V8","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter Executable Digital Twin","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Simcenter Studio","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Solid Edge","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Teamcenter Share","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Teamcenter V2412","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Teamcenter V2506","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Teamcenter V2512","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Teamcenter V2606","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"TIA Administrator","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"User Management Component (UMC)","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"VersiCharge AC Series","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"VersiCloud","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"Siemens","product":"Xpedition Designer","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"Xpedition Enterprise","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"RUGGEDCOM APE1808","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cve-coordination@google.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":9.2,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-23T00:00:00+00:00","id":"CVE-2026-111497","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2026-10-27","cisaActionDue":"2026-11-10","cisaRequiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","cisaVulnerabilityName":"Google Brotli Unchecked Return Value Vulnerability","weaknesses":[{"source":"cve-coordination@google.com","type":"Secondary","description":[{"lang":"en","value":"CWE-252"},{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*","versionStartIncluding":"1.0.3","versionEndExcluding":"1.0.10","matchCriteriaId":"8A7BE60F-21B0-4779-8D59-6E5E58C5826B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*","versionStartIncluding":"1.1.0","versionEndExcluding":"1.1.1","matchCriteriaId":"48E72297-AFBD-4460-A732-5A6803CCCDB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:brotli:*:*:*:*:*:-:*:*","versionStartIncluding":"1.2.0","versionEndExcluding":"1.2.1","matchCriteriaId":"C8CA5C74-26A8-44E3-B893-1FA01CED49F5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionEndExcluding":"22.23.4","matchCriteriaId":"02348F18-5E17-4427-8B78-63B4082F2FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"23.0.0","versionEndExcluding":"24.22.1","matchCriteriaId":"852D09BB-A396-4813-81C9-7D89D5DD5FB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*","versionStartIncluding":"25.0.0","versionEndExcluding":"26.12.1","matchCriteriaId":"219CA855-3A40-42CE-BAB6-79CCFEE7746F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python-hyper:brotlicffi:*:*:*:*:*:python:*:*","versionEndExcluding":"1.2.1.0","matchCriteriaId":"E732E75B-4BEF-4D7E-8520-E03B707FB4F6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.0.33","matchCriteriaId":"65DCE51C-2CD9-4179-9354-5323D28573AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.22","matchCriteriaId":"98654489-8C4E-4801-8728-29B01A22DEED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.14","matchCriteriaId":"27DF5CF4-58E3-4F01-A3AA-D44B7DCC3D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview1:*:*:*:*:*:*","matchCriteriaId":"5DACF2FE-CF61-43E4-8A3F-F7A358DE8A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview2:*:*:*:*:*:*","matchCriteriaId":"280B2E64-3163-40AB-A048-14D58DEC42FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview3:*:*:*:*:*:*","matchCriteriaId":"12357908-3294-46EF-85A0-DA3F86C97489"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview4:*:*:*:*:*:*","matchCriteriaId":"849FC8F5-86CD-4B5D-ADFD-9CB16EA75D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview5:*:*:*:*:*:*","matchCriteriaId":"C86E87E2-B236-4AC9-B6C3-64B9CDEC91EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview6:*:*:*:*:*:*","matchCriteriaId":"9B14656E-2BB0-4B4B-B518-F3D5108253ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:preview7:*:*:*:*:*:*","matchCriteriaId":"E09C9DB3-F42C-4442-9CF0-24A780D094C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"67035E86-61F5-421E-B243-EF64458AD8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net:11.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"C46300CA-BA84-48B3-85C5-C20CB487C733"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","matchCriteriaId":"46D69DCC-AE4D-4EA5-861C-D60951444C6C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*","versionEndExcluding":"1.29.9","matchCriteriaId":"9F01FA9D-7190-431F-84DD-24D4EBC41A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*","versionStartIncluding":"1.30.0","versionEndExcluding":"1.30.6","matchCriteriaId":"B8DE25CE-AFCB-4685-9836-B8EC9C820975"},{"vulnerable":true,"criteria":"cpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*","versionStartIncluding":"1.31.0","versionEndExcluding":"1.31.2","matchCriteriaId":"55EBE231-2EB8-4C9C-B279-D07F82EA5B55"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anthropic:bun:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.4","matchCriteriaId":"51DD72B3-85F6-4B10-AEB4-41E0679ED0AA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","versionEndExcluding":"1.37.8","matchCriteriaId":"8EE6278D-A48A-427C-8A7E-1D4103E2ADF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.38.0","versionEndExcluding":"1.38.6","matchCriteriaId":"CDCA301F-83CA-4DDB-AAE4-24D5235EE2D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","versionStartIncluding":"1.39.0","versionEndExcluding":"1.39.3","matchCriteriaId":"B9A47DD3-2655-4722-9B9D-3888B590C82F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tianocore:edk2:*:*:*:*:*:*:*:*","versionEndIncluding":"202608","matchCriteriaId":"C4CFCBFB-4A38-481B-93AE-7D86CCDC6FB5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:woff2:-:*:*:*:*:*:*:*","matchCriteriaId":"6D1FC23A-20F7-48F7-ABB8-8D37903DFB58"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duckdb:duckdb:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.0","matchCriteriaId":"0DFA4F95-92F9-4369-BE42-387520F0765B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clickhouse:clickhouse:*:*:*:*:*:*:*:*","versionEndIncluding":"26.10.2.103","matchCriteriaId":"B40EE389-E2AC-4D86-91B2-79A895470317"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:arrow:*:*:*:*:*:*:*:*","versionEndIncluding":"26.0.0","matchCriteriaId":"46A78CA5-1E4A-4DAA-B40D-387B96C1E2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:arrow:27.0.0:dev:*:*:*:*:*:*","matchCriteriaId":"130A7077-7885-43CB-8AFF-B6056D380156"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcmilk:7-zip-zstd:*:*:*:*:*:*:*:*","versionEndIncluding":"26.02-1.5.7-r2","matchCriteriaId":"FB91A353-9BE9-49E7-86FD-6B5FBB291351"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:7-zip:p7zip:*:*:*:*:*:*:*:*","versionEndIncluding":"16.02","matchCriteriaId":"76A26292-08BE-459A-B25A-CA14AF8D3C29"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andybalholm:brotli:*:*:*:*:*:go:*:*","versionEndExcluding":"1.2.7","matchCriteriaId":"F3E50F12-AEFE-4B4F-B474-3676F145E032"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"37FDCA69-9049-40B4-88AF-F476901022B6"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*","matchCriteriaId":"B89A6863-B602-4404-8D26-337FECABFFF0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:common_configurator:-:*:*:*:*:*:*:*","matchCriteriaId":"1F93AD0A-C29E-4FA6-A18B-1F0D03CC900C"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:data_flow_monitoring:*:*:*:*:*:*:*:*","versionEndExcluding":"3.0.18","matchCriteriaId":"3562BB8C-6E76-4B16-A2EF-D343EED30DA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:dataxess_configurator:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5.7","matchCriteriaId":"076198F2-9992-4803-8377-8B264E1D7ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:edge_opc_ua_server_configurator:*:*:*:*:*:*:*:*","versionEndExcluding":"2.3.10","matchCriteriaId":"F1122EBA-DB7C-4680-AEEF-309C95843D0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:flow_creator_configurator:*:*:*:*:*:*:*:*","versionEndExcluding":"1.15.1","matchCriteriaId":"90BE4EB2-0B14-44F4-881D-F0DBAFCEF322"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:industrial_edge_cloud_connector_configurator:*:*:*:*:*:*:*:*","versionEndExcluding":"1.24.3","matchCriteriaId":"D0E0C6F6-40D0-4D71-ABCE-84449C4E743A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:industrial_edge_databus_configurator:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0.1","matchCriteriaId":"B57AD29D-69CF-4C76-AACA-3EAE3F8CBC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:industrial_edge_hub:-:*:*:*:*:*:*:*","matchCriteriaId":"70BA5718-0A9F-4B7D-9175-D6719B795363"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:industrial_edge_management_cloud:-:*:*:*:*:*:*:*","matchCriteriaId":"4EA7E869-9428-4D5E-95C0-F19B6BC1BFA9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:comos_walkinside:-:*:*:*:*:*:*:*","matchCriteriaId":"8C7AAED9-567F-4EE0-BC1B-F18E1109D316"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_braumat:8.2:update1:*:*:*:*:*:*","matchCriteriaId":"EFA8804E-1E7E-482F-A701-B988F6C0BCE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_braumat:8.2:update2:*:*:*:*:*:*","matchCriteriaId":"A7C12A3B-925A-4219-909B-6D2D0ADA6131"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_braumat:8.2:update3:*:*:*:*:*:*","matchCriteriaId":"3288CF66-F9D9-4DDD-9CAA-1EB2E075C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_braumat:8.2:update4:*:*:*:*:*:*","matchCriteriaId":"9B3EF16B-8281-4159-ABDE-A36881CD8460"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_braumat:8.2:update5:*:*:*:*:*:*","matchCriteriaId":"9DF55BA1-F06B-4868-AC51-15ADC8BFED3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_profiling_tool:-:*:*:*:*:*:*:*","matchCriteriaId":"0D473CE5-B139-422C-AFCF-5FBBDB2C0759"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_sistar:8.2:update1:*:*:*:*:*:*","matchCriteriaId":"28A180EC-5DB8-4E8A-B063-813FA3973068"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_sistar:8.2:update2:*:*:*:*:*:*","matchCriteriaId":"31122237-42B0-4B10-B33B-D6E6DEBC19B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_sistar:8.2:update3:*:*:*:*:*:*","matchCriteriaId":"2955D58B-350F-4F96-A41F-6594639403DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_sistar:8.2:update4:*:*:*:*:*:*","matchCriteriaId":"0E95149C-B212-4670-8DFC-EEC713E87741"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_sistar:8.2:update5:*:*:*:*:*:*","matchCriteriaId":"173F36F4-23F4-4650-805F-25A9032AF64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"8.2","matchCriteriaId":"DA06F4BD-1512-4700-AD3E-25C6CDA60246"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_companion:-:*:*:*:*:-:*:*","matchCriteriaId":"174C0674-3100-4CCB-B55E-6BB1FB8F8442"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_runtime:-:*:*:*:professional:*:*:*","matchCriteriaId":"E6BFBAED-EE2B-4DE4-A76C-824DD15F4608"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_unified_for_industrial_edge:-:*:*:*:*:*:*:*","matchCriteriaId":"4DC1EDC8-DA6D-476F-9656-0FB9809F9E30"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime:-:*:*:*:*:*:*:*","matchCriteriaId":"49B72BEA-DE75-4A5E-8658-30E5EBBFFF69"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simatic_wincc_unified_siqence:-:*:*:*:*:*:*:*","matchCriteriaId":"E2E193FF-ED70-432A-8B33-2453A8B2B21B"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:tia_administrator:-:*:*:*:*:*:*:*","matchCriteriaId":"FC8C7680-9033-4ECF-9764-5179A4033F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:tia_project-server_web_administration_tool:-:*:*:*:*:*:*:*","matchCriteriaId":"14BA6E1D-4D4E-4133-8869-5ADEC9CE545C"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:user_management_component:-:*:*:*:*:*:*:*","matchCriteriaId":"7139EEDB-2DCD-4C55-9DAC-423FB5807D11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:hyperlynx:-:*:*:*:*:*:*:*","matchCriteriaId":"92D6ED26-34E3-46A6-B025-F7DC263AA75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:innexis_architecture_native_acceleration:-:*:*:*:*:*:*:*","matchCriteriaId":"BE57EA6F-BA70-409D-B037-EDD603FAC0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:insights_hub:-:*:*:*:*:*:*:*","matchCriteriaId":"1B8E91A0-4BF0-4BDE-8F83-4FF374697A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_connect_electronics:-:*:*:*:*:*:*:*","matchCriteriaId":"0EC96381-D0C9-4949-86E7-1A1E8239A8F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_connect_manufacturing_operations_management:-:*:*:*:*:*:*:*","matchCriteriaId":"B0F5FAC2-E6E0-4ECA-86B6-9D082C1D674B"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_execution_core:-:*:*:*:*:*:*:*","matchCriteriaId":"0A6E1786-F0A9-498F-9DE9-F503B5DAD84A"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_execution_discrete:-:*:*:*:*:*:*:*","matchCriteriaId":"F04BAB87-71BB-4AB4-BC42-F89616698EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_execution_foundation:-:*:*:*:*:*:*:*","matchCriteriaId":"9FE353B7-07A1-4B50-8A43-62577C2208EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_execution_pharma:-:*:*:*:*:*:*:*","matchCriteriaId":"4CC50DA8-906E-4BD5-9861-668273EE3A76"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_execution_process:-:*:*:*:*:*:*:*","matchCriteriaId":"5CCA2643-1E89-49AE-B8CB-3A9CDA3031A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_intelligence:-:*:*:*:*:*:*:*","matchCriteriaId":"8E3FA7CB-6931-4D0C-A3E6-1BE71EA0D30F"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_quality:-:*:*:*:*:*:*:*","matchCriteriaId":"9D9D89CD-FDA5-42F0-8161-3752C8AED7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_rd\\\u0026l:-:*:*:*:*:*:*:*","matchCriteriaId":"69EDC5E0-6CCE-4120-913C-E598E0FE2D24"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:opcenter_x:-:*:*:*:*:*:*:*","matchCriteriaId":"A12051E1-2DC9-47C6-A320-927D0A7B9F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:pads_professional:-:*:*:*:essentials:*:*:*","matchCriteriaId":"C9033337-D032-403D-8BBF-3EA50253A40E"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:pads_professional:-:*:*:*:student:*:*:*","matchCriteriaId":"F06B80D2-6A35-4AF5-A07A-0F5C3370C3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:pave360_automotive:2026:*:*:*:*:*:*:*","matchCriteriaId":"B8DBFD9C-B213-4238-B39C-D4B537523CB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:process_preparation_x:-:*:*:*:-:*:*:*","matchCriteriaId":"FEBDB60C-D759-476D-AF06-3C0691FC72CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simcenter_executable_digital_twin:-:*:*:*:*:*:*:*","matchCriteriaId":"F6ACF933-A876-4DE5-BBA7-D5BF97DB1AB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:simcenter_studio:-:*:*:*:*:*:*:*","matchCriteriaId":"B8C684EC-BECB-4833-B1F9-F773225A6172"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:teamcenter:2412.0:*:*:*:*:*:*:*","matchCriteriaId":"963C8AAA-D3E0-4B10-93AE-DB15619EC5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:teamcenter:2506.0:*:*:*:*:*:*:*","matchCriteriaId":"261C46FE-1C63-4A1F-8C8E-FC331E8F119E"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:teamcenter:2512.0:*:*:*:*:*:*:*","matchCriteriaId":"7946C16C-5B81-42D2-BA6D-C8AA8FD5AD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:teamcenter:2606.0:*:*:*:*:*:*:*","matchCriteriaId":"86E64B27-FE8F-45AD-BE78-219E4067F8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:xpedition_designer:-:*:*:*:*:*:*:*","matchCriteriaId":"F52F6405-0228-4C3D-842F-839192076657"},{"vulnerable":true,"criteria":"cpe:2.3:a:siemens:xpedition_enterprise:-:*:*:*:*:*:*:*","matchCriteriaId":"AD525494-2807-48EA-AED0-11B9CB5A6A9B"}]}]}],"references":[{"url":"https://github.com/andybalholm/brotli/releases/tag/v1.2.7","source":"cve-coordination@google.com","tags":["Release Notes"]},{"url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high","source":"cve-coordination@google.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/23/25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/24/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/26/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/26/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/26/16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/03/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://broccoli2shell.com","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/advisories/GHSA-9v8h-qqgm-4m35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://github.com/dotnet/announcements/issues/494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mitigation","Third Party Advisory"]},{"url":"https://github.com/google/brotli/releases/tag/v1.0.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/google/brotli/releases/tag/v1.1.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://github.com/google/brotli/releases/tag/v1.2.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://patchtheplanet.org/brotli","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-045512.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-242944.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-443410.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-678870.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-898633.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","tags":["Third Party Advisory"]},{"url":"https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}