Siemens Desigo, Gridscale (ICSA-26-316-02)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Cybersecurity Advisories
At a glance
- What
- Cyber Threat
- Who
- CISA Cybersecurity Advisories
- When
- Nov 12, 2026 at 12:00 PM UTC
Official Statements
CISA Cybersecurity Advisories, November 12: โView CSAF Summary On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products.โ
Source: CISA Cybersecurity Advisories