Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

CISA has added two vulnerabilities affecting Adobe Commerce, Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities catalog. The primary vulnerability CVE-2026-111497 carries a critical CVSS score of 9.2 and is described as an unchecked return value vulnerability. Hundreds of Adobe Commerce and Magento stores have reportedly been breached via PolyShell attacks. Brotli exploit traffic has also emerged as a related threat vector. The active exploitation of these vulnerabilities prompted CISA to issue the KEV catalog update, urging organizations to patch immediately.