---
title: AppEnhancer - Is the product affected by CVE-2026-111497
description: AppEnhancer - Is the product affected by CVE-2026-111497
---

[Skip to content](https://knowledgebase.metasource.com/appenhancer-is-the-product-affected-by-cve-2026-111497#main-content)

[![2026 MetaSource Logo - Light Background](https://knowledgebase.metasource.com/hs-fs/hubfs/Images/Logos/2026%20MetaSource%20Logo%20-%20Light%20Background.png?width=226&height=29&name=2026%20MetaSource%20Logo%20-%20Light%20Background.png)](https://www.metasource.com/)

Open main navigation

Close main navigation

- [Go to Customer Portal](https://clientsupport.metasource.com/tickets-view)

[Go to Customer Portal](https://clientsupport.metasource.com/tickets-view?hsLang=en)

 Hello. How can we help you?

- There are no suggestions because the search field is empty.

1. [MetaSource Knowledge Base](https://knowledgebase.metasource.com/?hsLang=en)
2. [OpenText AppEnhancer (ApplicationXtender)](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en)

# AppEnhancer - Is the product affected by CVE-2026-111497

## Is OpenText AppEnhancer affected by CVE-2026-111497, related to a vulnerability in the Brotli decompression implementation used by affected .NET runtimes?

### Cause

**CVE-2026-111497** affects the Brotli decoder used by affected versions of the Microsoft .NET runtime.

For AppEnhancer 23.4 and above, the.NET runtime is used by AppEnhancer Connector and AE Import Utility.

### Resolution

To address the reported **CVE-2026-111497**, update the installed**.NET runtime to the latest fixed/supported version**.

For .NET 8, Microsoft has released.**NET 8.0.33** as an out-of-band security update addressing CVE-2026-111497 in the Brotli decoder. Updating the affected .NET runtime to this fixed version, or a later supported patched version, addresses the vulnerable Brotli implementation provided by the .NET runtime.

The updated .NET runtime can be used with AppEnhancer 23.4 and above.

### Additional Information

The remediation applies to the Brotli implementation supplied with the affected .NET runtime.

Updating the system-installed .NET runtime does not, by itself, establish remediation for any independently bundled or self-contained runtime/library.

Microsoft states that.NET Framework is not affected by **CVE-2026-111497**.  
After updating the .NET runtime, ensure that AppEnhancer Connector and AE Import Utility are configured to use the updated runtime according to the referenced AppEnhancer KBA.

- [Tungsten (Kofax)](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#main-content)

    - [Installation and Setup](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#installation-and-setup)
    - [Troubleshooting](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#troubleshooting)
    - [Updates](https://knowledgebase.metasource.com/tungsten-kofax?hsLang=en#updates)
- [OpenText AppEnhancer (ApplicationXtender)](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#main-content)

    - [Installation and Setup](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#installation-and-setup)
    - [Basic Features](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#basic-features)
    - [Troubleshooting](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#troubleshooting)
    - [Updates](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#updates)
    - [System Requirements](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#system-requirements)
    - [Security](https://knowledgebase.metasource.com/opentext-appenhancer-applicationxtender?hsLang=en#security)
- [OpenText Intelligent Capture (Captiva)](https://knowledgebase.metasource.com/opentext-intelligent-capture-captiva?hsLang=en#main-content)

    - [Installation and Setup](https://knowledgebase.metasource.com/opentext-intelligent-capture-captiva?hsLang=en#installation-and-setup)
    - [Troubleshooting](https://knowledgebase.metasource.com/opentext-intelligent-capture-captiva?hsLang=en#troubleshooting)
- [PaperVision](https://knowledgebase.metasource.com/papervision?hsLang=en)
- [OpenText OTS (Output Transformation Server)](https://knowledgebase.metasource.com/opentext-ots-output-transformation-server?hsLang=en#main-content)

    - [OTS](https://knowledgebase.metasource.com/opentext-ots-output-transformation-server?hsLang=en#ots)
- [FileBound](https://knowledgebase.metasource.com/filebound?hsLang=en)

[![2026 MetaSource Logo - Light Background](https://knowledgebase.metasource.com/hs-fs/hubfs/Images/Logos/2026%20MetaSource%20Logo%20-%20Light%20Background.png?width=226&height=29&name=2026%20MetaSource%20Logo%20-%20Light%20Background.png "2026 MetaSource Logo - Light Background")](http://www.metasource.com)

[getsupport@metasource.com](mailto:getsupport@metasource.com)

[(888) 634-7684](tel:18886347684)

<https://www.linkedin.com/company/metasource/> <https://x.com/MetaSource> <https://www.facebook.com/MetaSource/> <https://www.instagram.com/metasource/>

© 2025 MetaSource, LLC. All rights reserved.