US warns of two serious security flaws being exploited in attacks
CISA added two severe vulnerabilities to its KEV catalog: CVE-2026-48356 in Adobe Commerce/Magento and CVE-2026-111497 in Google Brotli. The first issue concerns the Brotli data compression tool, which is widely used in a number of applications and services worldwide.