Vulnerabilities in Node.js (CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069) on Splunk Products - October 2026
Advisory ID: SVD-2026-1015
Published: 2026-10-28
Last Updated: 2026-10-28
Description
On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x.
These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more information, see Node.js Security Release.
The following vulnerabilities have a Security Impact Rating (SIR) of High and are addressed in this advisory:
- CVE-2026-111497 - Brotli decoder out-of-bounds write; potential remote code execution
- CVE-2026-105482 - DNS resolution truncation involving embedded NUL characters
- CVE-2026-105483 - TLS hostname validation bypass using fullwidth IP digits
- CVE-2026-106069 - TLS hostname validation bypass with noncanonical IP addresses
Splunk is investigating its product line to determine which products may be affected.
Product Status
| Product | Status |
|---|---|
| Splunk Cloud Platform | Under Investigation |
| Splunk Enterprise | Under Investigation |
| Splunk Universal Forwarder | Under Investigation |
| Splunk Enterprise Security | Under Investigation |
| Splunk ITSI | Under Investigation |
| Splunk SOAR Cloud | Under Investigation |
| Splunk SOAR | Under Investigation |
| Splunk SOAR Connectors | Under Investigation |
| Splunk UBA | Under Investigation |
| Splunk Attack Analyzer | Under Investigation |
| Splunk Observability Cloud | Under Investigation |
| Splunk Observability OpenTelemetry Collectors | Under Investigation |
| Splunk On-Call | Under Investigation |
| Splunk Apps & Add-ons | Under Investigation |
| AppDynamics SaaS | Under Investigation |
| AppDynamics On-Premises | Under Investigation |
| AppDynamics Agents | Under Investigation |
| Galileo | Under Investigation |
| WideField | Under Investigation |
| Smartlook | Under Investigation |
| Cisco Secure Endpoint - Cloud (including the Orbital component) | Under Investigation |
| Cisco Secure Endpoint - Private Cloud | Under Investigation |
| Cisco Secure Malware Analytics - Cloud | Under Investigation |
| Cisco Secure Malware Analytics - Private Cloud | Under Investigation |
| Cisco XDR | Under Investigation |