CISA Adds Adobe Commerce/Magento and Google Brotli Vulnerabilities to Exploited List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included two critical vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog. These are CVE-2026-48356 (PolyShell) affecting Adobe Commerce and Magento, and CVE-2026-111497 impacting Google's Brotli decoder library. CISA confirmed active exploitation of both, with PolyShell already used to breach hundreds of e-commerce stores, underscoring immediate security risks.