sign in--:--:--UTC

CVE-2026-111497

exploited in the wild☆ pin

CVSS

—

Reports

5

First seen

Oct 22, 2026

Last seen

Oct 24, 2026

Affected product

Node.js 22.x, 24.x, 26.x

Recent reports

Brotli Decoder Memory Corruption Flaw Affects Node.js, Bun, Python, and Other Software

The Hacker NewsOct 24, 2026 High

Node2Shell RCE Exploit Demonstrated on Node.js Using Crafted Brotli Data

The Hacker NewsOct 23, 2026 High

Node.js Contains 4 High-Risk Security Vulnerabilities (CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-111497)

NICS TaiwanOct 22, 2026 High

Multiple Vulnerabilities in Node.js (CVE-2026-105481 to CVE-2026-111497)

GovCERT.HKOct 22, 2026 Medium

Node.js Multiple Vulnerabilities

HKCERTOct 22, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans