NewsCheck Point Research
2nd November – Threat Intelligence Report
Linked advisories
- CVE-2026-111497Google Brotli: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-111497Node.js: Mehrere Schwachstellen
- CVE-2026-111497OSV-Eintrag
- CVE-2026-111497OSV-Eintrag
- CVE-2026-111497Google Brotli — Google Brotli Unchecked Return Value Vulnerability
- CVE-2026-111497Debian brotli: security update
- CVE-2026-111497Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- CVE-2026-111497Debian LTS brotli: security update
- CVE-2026-111497Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
- CVE-2026-111497Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CVE-2026-111497Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CVE-2026-111497Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package
- CVE-2026-111497Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
- CVE-2026-111497Node.js Multiple Vulnerabilities
- CVE-2026-111497Node2Shell CVEs
- CVE-2026-111497Brotli vulnerability
- CVE-2026-111497Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products
- CVE-2026-111497Active Exploitation of Critical Brotli Vulnerability Affecting Multiple Products
- CVE-2026-111497Google Brotli Remote Code Execution Vulnerability
- CVE-2026-111497Brotli vulnerability
- CVE-2026-111497CVE-2026-111497 affecting Brotli Decoder
- CVE-2026-111497Out-of-Bounds Write in Google Brotli Decoder
- CVE-2026-111497Out-of-Bounds Write in Google Brotli Decoder
- CVE-2026-111497Out-of-Bounds Write in Google Brotli Decoder
- CVE-2026-111497Out-of-Bounds Write in Google Brotli Decoder
- CVE-2026-111497.NET vulnerabilities
- CVE-2026-111497Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
- CVE-2026-111497Red Hat Security Advisory: RHOAI 3.4.6 - Red Hat OpenShift AI
- CVE-2026-111497Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
- CVE-2026-111497Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
- CVE-2026-111497Red Hat Security Advisory: brotli security, bug fix, and enhancement update
- CVE-2026-111497Red Hat Security Advisory: brotli security update
- CVE-2026-111497Red Hat Security Advisory: brotli security update
- CVE-2026-111497Red Hat Security Advisory: brotli security update
- CVE-2026-111497Red Hat Security Advisory: brotli security, bug fix, and enhancement update
- CVE-2026-111497Red Hat Security Advisory: brotli security, bug fix, and enhancement update
- CVE-2026-111497Red Hat Security Advisory: brotli security, bug fix, and enhancement update
- CVE-2026-111497Red Hat Security Advisory: brotli security update
- CVE-2026-111497Red Hat Security Advisory: brotli security update
- CVE-2026-111497Red Hat Security Advisory: brotli security update
- CVE-2026-111497Red Hat Security Advisory: thunderbird security update
- CVE-2026-111497Red Hat Security Advisory: firefox security update
- CVE-2026-111497Red Hat Security Advisory: firefox security update
- CVE-2026-111497Red Hat Security Advisory: firefox security update
- CVE-2026-111497Red Hat Security Advisory: thunderbird security update
- CVE-2026-111497Red Hat Security Advisory: thunderbird security update
- CVE-2026-111497Red Hat Security Advisory: thunderbird security update
- CVE-2026-111497Siemens ProductCERT Advisory SSA-443410
- CVE-2026-111497Siemens ProductCERT Advisory SSA-898633
- CVE-2026-111497Siemens ProductCERT Advisory SSA-045512
- CVE-2026-111497Security update for brotli
- CVE-2026-111497Security update for MozillaFirefox
- CVE-2026-111497Red Hat Security Advisory: Satellite 6.19 security update
- CVE-2026-118539OSV-Eintrag
- CVE-2026-118539Drupal Erweiterungen: Mehrere Schwachstellen
- CVE-2026-118539Drupal Commerce Core: fehlende Autorisierung
- CVE-2026-118539Drupal Commerce Core access bypass actively exploited (CVE-2026-118539, SA-CONTRIB-2026-254)
- CVE-2026-118539Drupal Commerce Core: fehlende Autorisierung
- CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD Software — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
- CVE-2026-76418Cisco Secure Firewall Threat Defense (FTD) Software: Null-Pointer-Dereferenzierung
- CVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability
- CVE-2026-76418Cisco Products Denial of Service Vulnerability
- CVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CVE-2026-76418Cisco Secure Firewall Threat Defense und Cisco ASA: Schwachstelle ermöglicht Denial of Service
- CVE-2026-98432Linux Kernel: Use-After-Free
- CVE-2026-98432Linux Kernel: Mehrere Schwachstellen
- CVE-2026-98432Debian linux: security update
- CVE-2026-98432ipv4: free inet_opt and ireq_opt after an RCU grace period
- CVE-2026-98432Linux Kernel: Use-After-Free
- CVE-2026-98432Debian LTS linux-6.12: security update
- CVE-2026-98432Debian LTS linux: security update
- CVE-2026-98432Linux kernel CVE-2026-98432: TCP use-after-free rated 9.8, Anthropic says its AI built a remote root exploit
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Linux kernel RCE CVE-2026-98432
- CVE-2026-98432Debian Linux Kernel Multiple Vulnerabilities
- CVE-2026-98432RedHat Linux Kernel Multiple Vulnerabilities
- CVE-2026-98432SUSE Linux Kernel Multiple Vulnerabilities
- CVE-2026-98432Red Hat Security Advisory: kernel security, bug fix, and enhancement update
- CVE-2026-98432Citrix XenServer Multiple Vulnerabilities
- CVE-2026-111497Security update for nodejs24
- CVE-2026-111497Security update for nodejs22
- CVE-2026-111497Security update for nodejs22
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-76418Active Exploitation of Vulnerability in Cisco Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense
- CVE-2026-111497Security update for brotli
- CVE-2026-98432Security update for the Linux Kernel
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 87 for SUSE Linux Enterprise 12 SP5)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 16)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-98432Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
- CVE-2026-111497Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
- CVE-2026-98432Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Affected vendors and products
- 7-Zip 7-Zip p7zip
- Anthropic
- Apache Software Foundation Apache Arrow
- Cisco Cisco Adaptive Security Appliance (ASA) Software
- Cisco Cisco Secure Firewall Adaptive Security Appliance (asa) Software
- Cisco Cisco Secure Firewall Threat Defense (ftd) Software
- Cisco Cisco Firepower Threat Defense Software
- ClickHouse ClickHouse
- Debian Debian Linux
- Debian Linux
- Debian Linux-6.12
- Drupal Commerce Core
More on November
Other advisories
- HighCVE-2026-20545Android Patchday November 2026 (Google Android, Automotive OS and XR): Mehrere Schwachstellen
- CriticalCVE-2026-58936Android November 2026 bulletin: critical Framework RCE with no user interaction (CVE-2026-58868)
- Highbsi:WID-SEC-2024-3328Android Patchday November 2024
- MediumCVE-2025-62199November 2025 Monthly Patch
- Not ratedivanti:november-2025-security-updateNovember 2025 Security Update
- Not ratedosv:MAL-2025-44625Malicious code in hotel-november-orange-teqks (npm)
- Not ratedosv:MAL-2025-45363Malicious code in november-cherry-elderberry-kfeip (npm)
- Not ratedosv:MAL-2025-45364Malicious code in november-elderberry-papaya-pboug (npm)
Other news entries
- ISC Stormcast For Friday, November 6th, 2026 https://isc.sans.edu/podcastdetail/10168, (Fri, Nov 6th)NewsSANS ISC Diary
- ISC Stormcast For Thursday, November 5th, 2026 https://isc.sans.edu/podcastdetail/10166, (Thu, Nov 5th)NewsSANS ISC Diary
- Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as RootNewsThe Hacker News
- Android Patchday November 2026 (Google Android, Automotive OS and XR): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User InteractionNewsThe Hacker News
- ISC Stormcast For Wednesday, November 4th, 2026 https://isc.sans.edu/podcastdetail/10164, (Wed, Nov 4th)NewsSANS ISC Diary
- Kyiv Independent hacked: attackers used its CMS and newsletter service to email readers a fake nuclear attack warningBreachpwn.watch
- mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious ActivityNewsThe Hacker News
Source: https://research.checkpoint.com/2026/2nd-november-threat-intelligence-report/
ID