CISA Flags Actively Exploited Vulnerabilities in Adobe Commerce and Google Brotli

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog with two new entries, indicating active exploitation. These include a critical unrestricted file upload flaw in Adobe Commerce and Magento, potentially allowing arbitrary code execution, and an unchecked return value vulnerability in Google's Brotli decoder library, which could lead to remote code execution or denial-of-service. Organizations are urged to patch these vulnerabilities promptly to mitigate risks.