Adobe Commerce and Brotli Vulnerabilities Added to KEV Catalog
This brief is machine-written from public headlines and excerpts and has not been reviewed. Check the sources for the full story.
CISA added two vulnerabilities affecting Adobe Commerce and the Brotli decoder library to its KEV catalog following evidence of active exploitation. Reports indicate hundreds of stores were targeted in PolyShell attacks involving Brotli exploit traffic.
Why it matters
Tracking actively exploited vulnerabilities helps security teams prioritize patching and protect exposed assets.
What to do
- Apply available security updates for affected software and libraries
- Monitor network traffic for known exploit patterns
- Scan systems for indicators of compromise