22.10.2026 - Node2Shell vulnerability

On 2026-10-21, a critical vulnerability with the name Node2Shell (CVE-2026-111497) has been disclosed. 

In this context, we would like to inform you that none of the BOC products (ADONIS, ADOIT, ADOGRC) include any Node.js components. 

Therefore, BOC products are not subject to this vulnerability, neither in SaaS deployments nor in on-premises deployments, and consequently no mitigation or remediation actions need to be taken to secure instances of ADONIS, ADOIT, and ADOGRC.

We are committed to maintaining a strong security posture and communicating transparently about developments in the software supply chain landscape.

BOC Corporate Security and Compliance Team.