Skip to content
OpenAdvisories
Critical 1 exploited CVE SSA-242944 1 CVE

SSA-242944: Node2Shell Vulnerability in Siemens Industrial Products

Published Nov 10, 2026 · Updated Nov 10, 2026

Vendor: Siemens Product: COMOS Walkinside Product: gDAP (gPROMS Digital Application Platform) Product: Project Server Web Administration Tool Product: SIMATIC BRAUMAT Product: SIMATIC Profiling Tool Product: SIMATIC SISTAR Product: SIMATIC WinCC Companion Product: SIMATIC WinCC OA V3.20 Product: SIMATIC WinCC OA V3.21 Product: SIMATIC WinCC Runtime Professional Product: SIMATIC WinCC Unified for Industrial Edge Product: SIMATIC WinCC Unified SIQENCE Product: SIMATIC WinCC V7/V8 Product: simatic_wincc_unified_pc_runtime Product: TIA Administrator Product: User Management Component (UMC)

Summary

On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens products.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available.

Vulnerabilities 1

  • Critical 9.2
    CVE-2026-111497 Exploited Public exploit EPSS 83%

    Out-of-Bounds Write in Google Brotli Decoder

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

    Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
    KEV Oct 27, 2026

Revision history

  1. #1

    Publication Date

References