Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-111497 (CVSS score: 9.2) - An unchecked return value vulnerability in
在 X 上接收快讯漏洞利用、重大泄露和故障，附应对措施。
关注 @vulnpulse_app检查你的信息是否已泄露
- Have I Been Pwned：免费查询你的邮箱地址是否出现在过去的泄露数据中（FBI 也提供泄露的密码）
- Google 密码检查：检查保存在 Google 中的密码是否泄露、重复使用或强度不足，并建议更改
| CVE | CVE-2026-111497 |
|---|---|
| 来源 | The Hacker News |
| 获取时间 | 2026/10/28 16:14 |
| 数据 | Markdown JSON |
2026/10/28 14:42，The Hacker News 发布了“Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges”（类型：数据泄露）。CVE：CVE-2026-111497。