[Not Affected] Peplink Security Notice: Google Brotli Vulnerability (CVE-2026-111497)

Announcements Peplink Security Advisories
,
1

Published: 2026-10-27 [Last Updated: 2026-10-27]

Status:
Peplink products, including router firmware, FusionHub, InControl 2 and the InControl 2 Virtual Appliance (ICVA), do not use Brotli and are not affected by CVE-2026-111497.

Background:
We have received questions about the Google Brotli decoder vulnerability CVE-2026-111497. The CVE was published on 2026-10-22, and CISA added it to the Known Exploited Vulnerabilities (KEV) Catalog on 2026-10-27.

Details of the CVE can be found at:

Products covered by this notice:

  1. Router, Switch, AP firmware (all models)
  2. FusionHub
  3. InControl 2
  4. InControl 2 Virtual Appliance (ICVA)

Peplink engineering has confirmed that Brotli is not used in these products.

Action required No action is required for the products listed above.

We will update this post if anything changes.

3 Likes