Amplience incident

Broccoli2Shell vulnerability (CVE-2026-111497)

Resolved after 1 day 17 hours, on October 26, 2026.

resolved Oct 28, 2026, 11:49 AM UTC

Our engineering and security teams have completed their assessment of the Broccoli2Shell vulnerability (CVE-2026-111497). Appropriate mitigations have been implemented to address the identified risks. We consider this matter resolved and will continue to monitor for any further developments.

Started
Oct 26, 2026, 05:57 PM UTC
Resolved
Oct 28, 2026, 11:49 AM UTC
Duration
1d 17h
Detected by Pingoru
Oct 26, 2026, 05:57 PM UTC

Update timeline

  1. investigating Oct 26, 2026, 05:57 PM UTC

    We are aware of the recently disclosed Broccoli2Shell vulnerability (CVE-2026-111497). Our engineering and security teams are actively investigating the potential impact on Amplience services and assessing whether any additional protective measures are required. We are treating this assessment as a priority and will provide further updates as appropriate.

  2. investigating Oct 28, 2026, 11:49 AM UTC

    We are continuing to investigate this issue.

  3. resolved Oct 28, 2026, 11:49 AM UTC

    Our engineering and security teams have completed their assessment of the Broccoli2Shell vulnerability (CVE-2026-111497). Appropriate mitigations have been implemented to address the identified risks. We consider this matter resolved and will continue to monitor for any further developments.

Your product runs on more than Amplience

Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.

Add your stack →