View CSAF Summary On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products. Siemens has released…
· 40 h ago · CISA advisories and alerts
SourcesCISA advisories and alerts
Why this score
Machine rubric: impact 1, exploitability 1, critical sector 0, unresolved +1; from CISA advisories and alerts.