#HTTP2Shell
LightNews LightNews
lasemanaphp.com
HTTP2Shell: el descompresor Brotli que llevan Node.js, Python y .NET permite ejecutar código con datos manipulados. Si descomprimes Brotli en el servidor, revisa tus dependencias.

vía @elhacker.net
Parches de emergencia ante la vulnerabilidad crítica 'HTTP2Shell' en Brotli
Blog sobre informática, tecnología y seguridad con manuales, tutoriales y documentación sobre herramientas y programas
blog.elhacker.net
November 3, 2026 at 3:00 PM
helpnetsecurity.com
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up

📖 Read more: www.helpnetsecurity.com/2026/11/03/p...

#cybersecurity #cybersecuritynews #patching #virtualpatching #vulnerabilitymanagement
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up - Help Net Security
HTTP2Shell reveals the gap between AI bug discovery and fixes. Sweet Security Virtual Patching blocks attacks while patches arrive.
www.helpnetsecurity.com
November 3, 2026 at 12:09 PM
wordfenceofficial.bsky.social
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites

www.wordfence.com/blog/2026/11...
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unof...
www.wordfence.com
November 2, 2026 at 6:19 PM
allcaps.bsky.social
Another day, another critical server exploit:
www.cve.org/CVERecord?id...

Out-of-Bounds Write in Google Brotli Decoder
AKA Node2Shell, Broccoli2Shell, or HTTP2Shell
9.2 CVE rating

Barely noon on Monday.
www.cve.org
November 2, 2026 at 5:35 PM
lordman1982.bsky.social
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected
www.aikido.dev/blog/python-...
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected.
The Brotli flaw behind Node2Shell (CVE-2026-111497) affects many libraries and applications using HTTP with Brotli or brotlicffi installed. Check your versions and upgrade to the fix.
www.aikido.dev
November 2, 2026 at 1:03 PM
etguenni.bsky.social
Die #Brotli #Schwachstelle CVE-2026-111497 reicht über node.js hinaus. Daher prüfen, was betroffen ist und reagieren

borncity.com/blog/2026/10...
HTTP2Shell: Brotli-Sicherheitslücke CVE-2026-111497 über Node.js hinaus prüfen
Seit einigen Tagen ist ja eine Schwachstelle (CVE-2026-111497) im Brotli-Decoder von Node.js bekannt geworden. Es gibt zwar Updates, aber inzwischen ist klar, dass die Brotli-Bibliotheken in mehr…
borncity.com
October 31, 2026 at 6:41 PM
seanchiggins.com
Microsoft releases emergency .NET patches for critical Brotli flaw buff.ly/fZbCzyH
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
ift.tt
October 30, 2026 at 8:44 PM
ipnotica.bsky.social
HTTP2Shell? I wish there was a specific reason listed beyond proactivity :[
October 30, 2026 at 4:34 PM
pentest-tools.com
With Sniper: Auto-Exploiter, confirm which services are actually exploitable, with proof, then validate the patch.

KEV status means “patch today.” Validation tells you which services to fix first. Part of the Exploit plan.

#offensivesecurity #ethicalhacking
Node2Shell/HTTP2Shell - Brotli Decoder Remote Code Execution (CVE-2026-111497)
An unauthenticated attacker who can send Brotli-compressed request bodies to the application or proxy, or make it fetch Brotli-compressed responses from a server they control, can corrupt process memo...
pentest-tools.com
October 30, 2026 at 2:27 PM
lasemanaphp.com
PHP publica paquetes nuevos para Windows (8.5.12-1, 8.4.27-1, 8.3.36-1, 8.2.35-1) con Brotli 1.2.1 por HTTP2Shell: en Windows se alcanza vía cURL con la descompresión automática.
PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
www.php.net
October 30, 2026 at 1:00 PM
packetstorm.bsky.social
HTTP2Shell: The Brotli Vulnerability That Extends beyond Node.js https://packetstorm.news/news/view/46754 #news
October 29, 2026 at 5:04 PM
adhisimon.kodesumber.com.ap.brid.gy
Solusi praktis dan cepat buat nangani #http2shell sebelum semua kode di-patch adalah blokir di #reverseproxy semua request POST/PUT/PATCH yang ada request header "Content-Encoding".

Tentu saja, yang paling ideal adalah patch semua servis yang beresiko.
October 29, 2026 at 4:16 PM
ralf-ladner.bsky.social
HTTP2Shell - Brotli-Sicherheitslücke geht über Node.js hinaus

#Brotli #BrotliCode @CheckPointSW #Cybersecurity #Cybersicherheit #HTTP2Shell #Node_js #Node2Shell #Schwachstelle #Sicherheitslücke

netzpalaver.de/2026/...
October 29, 2026 at 1:58 PM
haproxy.bsky.social
HAProxy Community and HAProxy Enterprise are NOT vulnerable to the new HTTP2Shell vulnerability (CVE-2026-111497). But your backend applications might still be at risk.

You can use HAProxy to block the attack vector at the edge while you patch your fleet: www.haproxy.com/blog/haproxy...
HAProxy is not vulnerable to HTTP2Shell (CVE-2026-111497)
HAProxy is not vulnerable to Brotli CVEs (HTTP2Shell) because it doesn't provide Brotli decoding. However, it can help protect vulnerable backends by blocking potentially dangerous requests.
www.haproxy.com
October 29, 2026 at 1:20 PM
eulinuxevolutionde.eurosky.social
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....

#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
Die US-Cybersicherheitsbehörde CISA warnt vor der aktiv ausgenutzten Sicherheitslücke HTTP2Shell in der Kompressionsbibliothek Brotli. Auch Sicherheitsforscher haben erste Angriffsversuche registriert...
winfuture.de
October 29, 2026 at 12:28 PM
eulinuxevolutionde.eurosky.social
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....

#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
Die US-Cybersicherheitsbehörde CISA warnt vor der aktiv ausgenutzten Sicherheitslücke HTTP2Shell in der Kompressionsbibliothek Brotli. Auch Sicherheitsforscher haben erste Angriffsversuche registriert...
winfuture.de
October 29, 2026 at 12:28 PM
winfuture.de
Eine kritische Sicherheitslücke in Googles Kompressionsbibliothek #Brotli wird aktiv attackiert. Betroffen sind unter anderem #Nodejs und Virtualisierungslösungen von VMware.
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de
October 29, 2026 at 12:14 PM
hacker.at.thenote.app
CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
www.bleepingcomputer.com
October 29, 2026 at 8:56 AM
hacker.at.thenote.app
CISA warns of hackers now exploiting critical Node2Shell flaw

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
www.bleepingcomputer.com
October 29, 2026 at 8:56 AM
billingsley.bsky.social
COGNOSCERE Tech Brief — 2026-10-29

CVE-2026-111497, dubbed HTTP2Shell, is a CVSS 9.2 out-of-bounds write in Google'

https://youtube.com/watch?v=e82faCmcueI

https://www.cognoscerellc.com/news
October 29, 2026 at 8:11 AM
hacker.at.thenote.app
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free

The root-cause fix will take weeks; protection can’t wait
#hackernews #news
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free
The root-cause fix will take weeks; protection can’t wait
hackernoon.com
October 29, 2026 at 3:04 AM
hacker.at.thenote.app
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free

The root-cause fix will take weeks; protection can’t wait
#hackernews #news
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free
The root-cause fix will take weeks; protection can’t wait
hackernoon.com
October 29, 2026 at 3:04 AM
cybersecurity.page
The HTTP/2 "2Shell" flaw traces back to an if-statement added as an undisclosed fix for an earlier vulnerability. The patch sat in the code for years without a CVE or advisory, quietly creating the request-smuggling weakness now drawing exploit research.
If-statement that caused HTTP2Shell was itself undisclosed patch of vulnerability
View post on Reddit.
reddit.com
October 29, 2026 at 1:42 AM
cybersecurity.page
CISA added CVE-2026-111497, a Brotli decompression memory-corruption flaw, to its Known Exploited Vulnerabilities catalog. Software using vulnerable Brotli decoders, including Node.js and .NET, may face crashes, info disclosure, or RCE from attacker-controlled compressed data. Patch and redeploy.
CISA Confirms Active Exploitation of Node2Shell / HTTP2Shell
CISA added CVE-2026-111497, a Brotli decompression memory-corruption vulnerability, to its Known Exploited Vulnerabilities catalog. It can potentially enable information disclosure, crashes, or rem...
reddit.com
October 29, 2026 at 12:42 AM
hacker.at.thenote.app
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost

New York, NY, 27th October 2026, CyberNewswire
#hackernews #news
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, 27th October 2026, CyberNewswire
hackread.com
October 28, 2026 at 11:43 PM