VertiGIS uses this page to provide key information about the CVE-2026-111497 security vulnerability (Brotli decoder vulnerability) and its impact on the VertiGIS product families. This article will be updated as soon as new information becomes available.
CVE-2026-111497 is a critical security vulnerability in the Brotli decoder that can allow arbitrary code execution remotely in affected applications. In October 2026, Node.js released security updates for the 22.x, 24.x, and 26.x branches, addressing this and other serious vulnerabilities. No active exploitation is currently known. For more information, see the official Node.js advisory.
Unaffected product families:
- VertiGIS 1Integrate
- VertiGIS 1Data Gateway
- VertiGIS 1Engage
- VertiGIS 1Streetworks
- 1SMS
- 1Edit
- WebOffice
Affected product families:
- VertiGIS Studio (more information)
- LM/3A/DAVID (more information)
Unaffected partner products:
- (to be added)
Affected partner products:
- (to be added)
Comments
0 comments
Please sign in to leave a comment.