Security Advisories for Marshal Product Lines


This article applies to:

  • WebMarshal
  • MailMarshal
  • SPE

Question:

  • Security Advisories and action required

Information:

 CVSS Summary  Product Versions
Affected 
Unaffected   Notes Published 
9.2 CVE-2026-111497 - Brotli Vulnerability  WebMarshal  <=8.0.0  >= 8.0.1
(ETA 3 Nov 2026)
  2026-10-27
9.2 CVE-2026-111497 - Brotli Vulnerability  MailMarshal  None *  All *

While no usage exists, underlying .NET versions can be patched as per Knowledgebase article Q21270.

Other packages affected by this vulnerability are not used by this product.

2026-10-27
9.2 CVE-2026-111497 - Brotli Vulnerability  SPE  None *   All *

While no usage exists, underlying .NET versions can be patched as per Knowledgebase article Q21271.

Other packages affected by this vulnerability are not used by this product.

2026-10-27
9.2 CVE-2026-109618 - PHP Vulnerability  WebMarshal  None  All No usage 2026-10-27
9.2 CVE-2026-109618 - PHP Vulnerability  MailMarshal  None  All No usage  2026-10-27
9.2 CVE-2026-109618 - PHP Vulnerability  SPE  None  All No usage  2026-10-27


Last Modified 10/29/2026.
https://support.levelblue.com/kb/KnowledgebaseArticle21269.aspx