#CVE-2026-111497
LightNews LightNews
Top 3 CVE for last 7 days:
CVE-2026-98432: 494 interactions
CVE-2026-109618: 178 interactions
CVE-2026-111497: 169 interactions


Top 3 CVE for yesterday:
CVE-2026-98432: 61 interactions
CVE-2026-118539: 14 interactions
CVE-2026-58882: 7 interactions
November 1, 2026 at 8:03 AM
Top 3 CVE for last 7 days:
CVE-2026-109618: 299 interactions
CVE-2026-111497: 275 interactions
CVE-2026-109619: 248 interactions


Top 3 CVE for yesterday:
CVE-2026-98432: 70 interactions
CVE-2026-111497: 22 interactions
CVE-2026-111: 21 interactions
October 30, 2026 at 7:41 AM
Top 3 CVE for last 7 days:
CVE-2026-98432: 433 interactions
CVE-2026-111497: 235 interactions
CVE-2026-109618: 211 interactions


Top 3 CVE for yesterday:
CVE-2026-98432: 362 interactions
CVE-2026-109618: 11 interactions
CVE-2026-76418: 10 interactions
October 31, 2026 at 7:27 AM
deskmodder.de
Total Commander 11.58.1 mit Sicherheitsupdate (Brotli CVE-2026-111497) und mehr
Total Commander 11.58.1 mit Sicherheitsupdate (Brotli CVE-2026-111497) und mehr
www.deskmodder.de
October 29, 2026 at 11:47 AM
Top 3 CVE for last 7 days:
CVE-2026-109618: 593 interactions
CVE-2026-109619: 465 interactions
CVE-2026-111497: 308 interactions


Top 3 CVE for yesterday:
CVE-2026-111497: 36 interactions
CVE-2026-109619: 33 interactions
CVE-2026-109618: 32 interactions
October 29, 2026 at 7:38 AM
ahmandonk.bsky.social
📰 CISA Peringatkan Celah Kritis Node2Shell CVE-2026-111497 Sudah Dieksploitasi Hacker, Server Diminta Segera Update

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/30/cisa-node2shell-cve-2026-111497-dieksploitasi-hacker/

#cisa #cve #cybersecurity #keamananSiber #malware #node.j
October 30, 2026 at 8:49 AM
r-blueteamsec.bsky.social
cve-2026-111497-wordpress-poc: CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress
cve-2026-111497-wordpress-poc: CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress
github.com
October 31, 2026 at 8:24 PM
cyfar.ca
~Asec~
Malicious Brotli data can corrupt Node.js memory, causing DoS, leaks, or RCE.
-
IOCs: CVE-2026-111497
-
#CVE-2026-111497 #NodeJS #ThreatIntel
Node2Shell: Node.js Brotli RCE
asec.ahnlab.com
October 29, 2026 at 12:31 PM
bleepingcomputer.com
CISA has confirmed that hackers are actively exploiting a critical Brotli vulnerability (CVE-2026-111497), also known as Node2Shell, Broccoli2Shell, and HTTP2Shell.
CISA warns of hackers now exploiting critical Node2Shell flaw
CISA has confirmed that hackers are actively exploiting a critical Brotli vulnerability (CVE-2026-111497), also known as Node2Shell, Broccoli2Shell, and HTTP2Shell.
www.bleepingcomputer.com
October 28, 2026 at 10:48 AM
ripjyr.bsky.social
Paloaltoの脆弱性情報 「CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)」が公開されました。
→ https://security.paloaltonetworks.com/CVE-2026-111497
October 31, 2026 at 7:03 AM
Top 3 CVE for last 7 days:
CVE-2026-109618: 1306 interactions
CVE-2026-109619: 1015 interactions
CVE-2026-111497: 436 interactions


Top 3 CVE for yesterday:
CVE-2026-111497: 41 interactions
CVE-2026-109618: 32 interactions
CVE-2026-97631: 18 interactions
October 28, 2026 at 7:19 AM
Top 3 CVE for last 7 days:
CVE-2026-98432: 538 interactions
CVE-2026-109618: 160 interactions
CVE-2026-111497: 148 interactions


Top 3 CVE for yesterday:
CVE-2026-98432: 44 interactions
CVE-2026-97229: 13 interactions
CVE-2026-110264: 9 interactions
November 2, 2026 at 8:11 AM
duonggiakhanh.com
🚨 Node2Shell (CVE-2026-111497) is now on CISA's KEV list: the Brotli decoder bug is being actively exploited. If your Node.js app decodes Brotli from untrusted input, update to 22.23.4 / 24.22.1 / 26.12.1 now. Bun and Python brotli need updates too. #cybersecurity #appsec
https://www.sophos.com/en-us/blog/node2shell-cve-2026-111497-in-active-exploitation
www.sophos.com
October 29, 2026 at 1:00 PM
lordman1982.bsky.social
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected
www.aikido.dev/blog/python-...
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected.
The Brotli flaw behind Node2Shell (CVE-2026-111497) affects many libraries and applications using HTTP with Brotli or brotlicffi installed. Check your versions and upgrade to the fix.
www.aikido.dev
November 2, 2026 at 1:03 PM
cyfar.ca
~Asec~
AI-driven attacks targeted exposed APIs, SaaS, and neglected perimeter systems in breaches across Korea and Japan.
-
IOCs: CVE-2026-110264, CVE-2026-111497, CVE-2026-109618
-
#AgenticAI #DataBreach #ThreatIntel
AI Agents Exploit Perimeter Weaknesses
asec.ahnlab.com
October 29, 2026 at 4:05 PM
cyfar.ca
~Cisa~
CISA added exploited Adobe Commerce/Magento and Google Brotli flaws to its KEV Catalog.
-
IOCs: CVE-2026-48356, CVE-2026-111497
-
#CVE-2026-111497 #CVE-2026-48356 #ThreatIntel
CISA Adds 2 Exploited CVEs
www.cisa.gov
October 27, 2026 at 8:01 PM
azureweekly.info
Protect against Brotli CVE-2026-111497 with Azure Web Application… by Yuval Pery
https://techcommunity.microsoft.com/blog/AzureNetworkSecurityBlog/protect-against-brotli-cve-2026-111497-with-azure-web-application-firewall-waf/4567288?utm_source=bluesky&utm_medium=social&utm_campaign=newsletter
Protect against Brotli CVE-2026-111497 with Azure Web Application… by Yuval Pery
Google Brotli versions 1.0.3 through 1.2.0 contain a buffer overflow vulnerability in the Brotli decoder, according to the recently published...
techcommunity.microsoft.com
October 29, 2026 at 4:20 AM
r-dotnet.at.shendrick.net
Brotli CVE-2026-111497 now patched in .NET, VS and PowerShell. How are you finding where Brotli decoding actually happens in your apps? https://www.reddit.com/r/dotnet/comments/1xfwvb3/brotli_cve2026111497_now_patched_in_net_vs_and/

#dotnet
October 29, 2026 at 8:45 PM
🛡️ Most-discussed CVEs on Bluesky, last 24h

1. CVE-2026-98432 · 55 people
2. CVE-2026-109618 · 10 people 🔥
3. CVE-2026-58882 · 10 people
4. CVE-2026-120189 · 8 people
5. CVE-2026-111497 · 7 people 🔥

🔥 = on CISA's Known Exploited list · details in the thread 🧵
November 1, 2026 at 7:15 PM
etguenni.bsky.social
Die #Brotli #Schwachstelle CVE-2026-111497 reicht über node.js hinaus. Daher prüfen, was betroffen ist und reagieren

borncity.com/blog/2026/10...
HTTP2Shell: Brotli-Sicherheitslücke CVE-2026-111497 über Node.js hinaus prüfen
Seit einigen Tagen ist ja eine Schwachstelle (CVE-2026-111497) im Brotli-Decoder von Node.js bekannt geworden. Es gibt zwar Updates, aber inzwischen ist klar, dass die Brotli-Bibliotheken in mehr…
borncity.com
October 31, 2026 at 6:41 PM
trendjpnews.bsky.social
cve-2026-111497

Googleの圧縮形式「Brotli」に深刻な脆弱性「HTTP2Shell」、Web関連に幅広く影響（窓の杜）
cve-2026-111497
cve-2026-111497 Googleの圧縮形式「Brotli」に深刻な脆弱性「HTTP2Shell」、Web関連に幅広く影響（窓の杜）
news.yahoo.co.jp
October 26, 2026 at 1:10 AM
triondev.bsky.social
Brotli Schwachstelle CVE-2026-111497: Schutz mit Traefik IngressRoute
Brotli Schwachstelle CVE-2026-111497: Schutz mit Traefik IngressRoute
Requests mit Content-Encoding br lassen sich in Kubernetes mit einer Traefik IngressRoute abweisen, bis die betroffenen Anwendungen aktualisiert sind.
www.trion.de
October 28, 2026 at 3:30 PM
oversecurity.net.web.brid.gy
brotli2crash: The Node.js "Critical RCE" That Can't Actually Fire
CVE-2026-111497 deep analysis: From source code audit to structural unreachability proof
qideng.substack.com
November 2, 2026 at 6:05 PM
themorpheus.bsky.social
Neues Tutorialsvideo:
Wie aus einem FALSE eine 9.8 RCE in Node wird

https://youtu.be/8Hr0ymVjb2A
Wie aus einem FALSE eine 9.8 RCE in Node wird
CVE-2026-111497, in der Szene Node2Shell, ist eine Lücke im Brotli-Decoder, den Node.js gleich mitbringt, und der Fix dafür stand knapp acht Monate im öffent...
youtu.be
October 31, 2026 at 9:27 AM
hendryadrian.bsky.social
CVE-2026-111497 is an out-of-bounds write in the Brotli decoder that may allow crashes, memory disclosure or RCE when vulnerable software decompresses attacker-controlled data. Zscaler reports reconnaissance and exploitation attempts.
CVE-2026-111497 Brotli Flaw May Enable RCE Across Node.js and Other Software
CVE-2026-111497 is an out-of-bounds write in the Brotli decoder that may allow crashes, memory disclosure or RCE when vulnerable software decompresses…
cyber.hendryadrian.com
October 28, 2026 at 10:00 PM