Changes Akamai Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities

Akamai: Incident updated: Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities

Incident updateNormal progress (typesafe/jev-1.13-20260917, 88%)Changed 2026-10-26 16:34 UTCwww.akamaistatus.com

Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

~~Struck in red~~ is what Akamai removed; blue is what they added. Muted text is unchanged context.

ChangedTitle#1

~~Customer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities~~

Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities

AddedUpdateinvestigating2026-10-26 16:13 UTC#2

not present

We are continuing to investigate this issue. The scope of this CVE has been expanded to include any foreign data which is being processed with the Brotli decoder, not just node.js. Customers and partners can find more details on the Akamai Community: https://community.akamai.com/customers/s/feed/0D5a700001apcFhCAIWe will provide an update as we progress.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 24
Before captured 13:04 UTC
In the 2026-10-24 checkpoint, timestamped by FreeTSA and DigiCert on Oct 25, 00:41 UTC. Record hash 58c5b266afe97090…
Download proof
Oct 26
After captured 16:34 UTC
In the 2026-10-26 checkpoint, timestamped by FreeTSA and DigiCert on Oct 27, 00:41 UTC. Record hash 9ead917426e56771…
Download proof

History of this incident

Tuesday, November 3

1 incident change

Normal progress
17:23Incident
Incident updateCustomer Security Advisory: Brotli Remote Code Execution Vulnerabilities [CVE-2026-111497]

Wednesday, October 28

1 incident change

Normal progress
17:54Incident
Incident updateCustomer Security Advisory: Brotli Remote Code Execution Vulnerabilities

Monday, October 26

1 incident change

Normal progress
16:34Incident
Incident updateCustomer Security Advisory: Brotli Remote Code Execution Vulnerabilitiesthis change

Saturday, October 24

2 incident changes

Normal progress
13:04Incident
Incident updateCustomer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities
Normal progress
00:43Incident
Incident updateCustomer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities

Friday, October 23

2 incident changes

Normal progress
20:13Incident
Incident updateCustomer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities
Normal progress
16:43Incident
Incident updateCustomer Security Advisory: Node.js Brotli Remote Code Execution Vulnerabilities

Cite this

Incident updated: Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities on Akamai’s status page, changed 2026-10-26 16:34 UTC (change 5 of 7).

Title: Incident updated: Customer Security Advisory: Brotli Remote Code Execution Vulnerabilities
Vendor: Akamai
Date: 2026-10-26 16:34 UTC
URL: https://rewindex.com/change/r555def6af9094f

All Akamai changes Akamai profile Markdown JSON