Critical Brotli Flaw Hits PAN-OS Firewalls — Palo Alto Issues Workarounds and Hotfix Timeline
Palo Alto Networks has confirmed a serious vulnerability in the Brotli compression decoder that affects certain PAN-OS firewall deployments and the Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497 with a CVSS score of 9.2, the flaw can lead to out-of-bounds memory writes that may allow attackers to corrupt memory, expose sensitive data, crash services, or — in some circumstances — execute code without authentication. Palo Alto’s advisory, published…