CYBERSECURITYTRACKER
Permanent story citation

Re: Brotli CVE-2026-111497

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12260

As cited

Copy frozen at (site build).

vulnerabilities

Re: Brotli CVE-2026-111497

Google Project Zero published an analysis of CVE-2026-111497 affecting Brotli compression library. The vulnerability has a CVSS score of 9.2 and appears on the known exploited vulnerabilities list.

Why it matters: Practitioners using Brotli in production systems should review the Project Zero analysis and prioritize patching this actively exploited critical vulnerability.

CVEsCVE-2026-111497
VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary