Home
/
Support Area
/
Node.js Vulnerabilities – Security Updates for AccurioPro Flux

  • Node.js Vulnerabilities

    Security Updates for AccurioPro Flux

    Warning alert system concept, system hacked on computer network, cybercrime and virus, Malicious software, compromised information, illegal connection, data breach cybersecurity vulnerability Corporate/Company, warning, hacker, alert, crime, system, security, spyware, attack, network, access, cyber, data, information, internet, message, password, concept, protection, server, software, virus, computer, danger, technology, digital, connection, cyberspace, leak, online, safety, website, fraud, malicious, vulnerability, web, antivirus, breach, detection, malware, intrusion, firewall, privacy, problem, typing, laptop, notebook, notice, red, cyber security, log4j

November 20, 2026

On the 21st October 2026, the Node.js project disclosed multiple security vulnerabilities, including CVE-2026-111497 (Node2Shell / Brotli2Shell), a high-severity vulnerability that may potentially allow remote code execution, information disclosure or denial of service.

Following an assessment by dots software, certain versions of AccurioPro Flux Essential, Premium and Ultimate have been identified as affected. Security updates have been released to address these vulnerabilities.

Customers are strongly advised to apply the available security updates as soon as possible.

  • Customers with a valid Software Maintenance Plan (SMP) should update to the latest patched AccurioPro Flux release using the hotfix installer.
  • Customers without a valid SMP can download the standalone security patch, which addresses CVE-2026-111497 from version 10.0 onwards and other October Node.js vulnerabilities from version 10.2.2 onwards.

Important

While versions earlier than 10.0 are not affected by CVE-2026-111497, they may still be affected by other Node.js vulnerabilities. Customers running affected versions earlier than 10.2.2 should be aware that the standalone patch does not address those additional vulnerabilities. Upgrading to the latest patched release is therefore recommended.

To date, there have been no known security incidents involving the exploitation of these vulnerabilities in AccurioPro Flux.