Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

CISA added two vulnerabilities to its Known Exploited Vulnerabilities catalog on Tuesday: one affecting Adobe Commerce and Magento, and another in Google's Brotli decoder library, citing active exploitation. The Adobe flaw, CVE-2026-111497, has a CVSS score of 9.2 and involves an unchecked return value that attackers use in PolyShell attacks to breach hundreds of stores.