Forest Global Training Partners

Cyber Risks · CISA Advisories

Siemens Desigo, Gridscale

View CSAF Summary On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens

Read the original at CISA Advisories ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2026-111497
Related
Siemens Industrial Edge Management Cyber Risks · Nov 12, 2026