Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

The US Cybersecurity and Infrastructure Security Agency CISA on Tuesday added two vulnerabilities impacting Adobe Commerce and Magento and Googles Brotli decoder library to its Known Exploited Vulnerabilities KEV catalog citing evidence of active exploitation The vulnerabilities are listed below CVE2026111497 CVSS score 92 An unchecked return value vulnerability in