Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
cisco-sa-notice-I8z3n6lK
Summary
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x.
These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release.
The following vulnerabilities have a Security Impact Rating (SIR) of High and are addressed in this advisory:
CVE-2026-111497 - Brotli decoder out-of-bounds write; potential remote code execution
CVE-2026-105482 - DNS resolution truncation involving embedded NUL characters
CVE-2026-105483 - TLS hostname validation bypass using fullwidth IP digits
CVE-2026-106069 - TLS hostname validation bypass with noncanonical IP addresses
For information about Splunk products and offerings, see Vulnerabilities in Node.js (CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069) on Splunk Products - October 2026
This investigation was expanded to cover Brotli outside of Node.js on October 30, 2026. The Brotli decoder flaw (CVE-2026-111497), which is in the Google Brotli C decoder, is often bundled with or linked to other software, so products beyond Node.js may be affected. For software that may be affected, see Broccoli2Shell.
Important: If a product is not listed within this advisory, Cisco's review indicates that the product is not affected by this vulnerability.
This advisory will be updated as additional information becomes available.
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
Any workarounds will be documented in the product-specific Cisco bugs, which are identified in the Vulnerable Products section of this advisory.
For information about fixed software releases, consult the Cisco bugs identified in the Vulnerable Products section of this advisory.
When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page, to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
CVEs in this advisory 4
Updates
- Published by Cisco
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.