Seguridad & cumplimiento normativo
Mantenemos los estándares más exigentes para proteger sus datos y garantizar la confianza.

DEVO-2026-0040
Remediation notice for CVE-2026-111497 in Brotli
Productos afectados
Registro de cambios
Initial publication - 2026-11-05
Remote Desktop Manager
Medium
CVE-2026-111497 is a vulnerability in the Brotli decompression library. Microsoft updated the version that ships in the .NET SDK 8.0.33, 9.0.22 and 10.0.14.
CVE(s)
CVE-2026-111497
Corrección y soluciones alternativas
Upgrade to Remote Desktop Manager Windows 2026.3.16.0, macOS 2026.3.2.3 or Linux 2026.3.2.1 or higher. For Remote Desktop Manager Windows, also install Microsoft .NET Desktop Runtime 10.0.14 or later. For Devolutions.PowerShell, update PowerShell 7 to 7.6.9 or later.
PowerShell Universal
Medium
CVE-2026-111497 is a vulnerability in the Brotli decompression library. Microsoft updated the version that ships in the .NET SDK 8.0.33, 9.0.22 and 10.0.14.
CVE(s)
CVE-2026-111497
Corrección y soluciones alternativas
We expect to release a version of PowerShell Universal that includes the fix next week. PowerShell cmdlets such as Invoke-WebRequest and Invoke-RestMethod can decode Brotli responses. Until the update is available, we recommend limiting outbound requests to trusted endpoints.
Devolutions Cloud Encryption Service
Medium
CVE-2026-111497 is a vulnerability in the Brotli decompression library. Microsoft updated the version that ships in the .NET SDK 8.0.33, 9.0.22 and 10.0.14.
CVE(s)
CVE-2026-111497
Corrección y soluciones alternativas
We expect to release a version of Devolutions Cloud Encryption Service that includes the fix this week. Outbound web requests made by the service can decode Brotli responses. The Devolutions Cloud Encryption Service only communicates with Devolutions systems.
UniGetUI
Medium
CVE-2026-111497 is a vulnerability in the Brotli decompression library. Microsoft updated the version that ships in the .NET SDK 8.0.33, 9.0.22 and 10.0.14.
CVE(s)
CVE-2026-111497
Corrección y soluciones alternativas
Upgrade to UniGetUI 2026.3.3 or higher. This version updates the .NET runtime to 10.0.14.