Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

The US Cybersecurity and Infrastructure Security Agency has added two vulnerabilities to its Known Exploited Vulnerabilities catalog, indicating they are being actively exploited. One of the vulnerabilities affects Adobe Commerce and Magento, while the other impacts Google's Brotli decoder library. A specific vulnerability, CVE-2026-111497, has a CVSS score of 9.2 and is described as an unchecked return value vulnerability. This development comes as attacks known as PolyShell have breached hundreds of stores. The emergence of exploit traffic related to the Brotli vulnerability has also been observed. The listing of these vulnerabilities in the KEV catalog suggests that they are being targeted by attackers.