Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found…
#hackernews #news #openai
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found…
#hackernews #news #openai
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late September during a high-compute red-teaming campaign. Finding bugs is getting faster. Fixing them isn’t. HTTP2Shell shows why that gap matters, and how Sweet Virtual Patching protects running applications until the fixes land. A bad stream, a broken decoder …
www.helpnetsecurity.com
November 4, 2026 at 11:47 AM
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found…
#hackernews #news #openai
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found…
#hackernews #news #openai
結局仕組み作りが大事。
【脆弱性ラッシュ】PHP2Shell・Brotli(HTTP2Shell)・Node・Chrome・Goが同時に来た週に、サーバーの「放置」が露呈した話 #Node.js - Qiita qiita.com/ysmreg1/item...
【脆弱性ラッシュ】PHP2Shell・Brotli(HTTP2Shell)・Node・Chrome・Goが同時に来た週に、サーバーの「放置」が露呈した話 #Node.js - Qiita qiita.com/ysmreg1/item...
【脆弱性ラッシュ】PHP2Shell・Brotli(HTTP2Shell)・Node・Chrome・Goが同時に来た週に、サーバーの「放置」が露呈した話 - Qiita
はじめに 2026年10月下旬、PHP、Node.js、Chrome、Goの重大な更新が立て続けに公開されました。私はこれを「脆弱性ラッシュ」と呼んでいます。 一斉に更新を進めるなかで、すでにサポートが切れている php7.4-fpm や Node 18 が見つかり、作業...
qiita.com
November 4, 2026 at 11:06 AM
結局仕組み作りが大事。
【脆弱性ラッシュ】PHP2Shell・Brotli(HTTP2Shell)・Node・Chrome・Goが同時に来た週に、サーバーの「放置」が露呈した話 #Node.js - Qiita qiita.com/ysmreg1/item...
【脆弱性ラッシュ】PHP2Shell・Brotli(HTTP2Shell)・Node・Chrome・Goが同時に来た週に、サーバーの「放置」が露呈した話 #Node.js - Qiita qiita.com/ysmreg1/item...
The fallout from both Php2Shell and Http2Shell (to use another example) was largely fuelled by not updating stuff, and I shudder to think of all the critical stuff that hasn't been updated.
If you have any influence at your workplace, NOW is the time to start pushing for updating and upgrading.
If you have any influence at your workplace, NOW is the time to start pushing for updating and upgrading.
November 4, 2026 at 7:30 AM
The fallout from both Php2Shell and Http2Shell (to use another example) was largely fuelled by not updating stuff, and I shudder to think of all the critical stuff that hasn't been updated.
If you have any influence at your workplace, NOW is the time to start pushing for updating and upgrading.
If you have any influence at your workplace, NOW is the time to start pushing for updating and upgrading.
HTTP2Shell: el descompresor Brotli que llevan Node.js, Python y .NET permite ejecutar código con datos manipulados. Si descomprimes Brotli en el servidor, revisa tus dependencias.
vía @elhacker.net
vía @elhacker.net
Parches de emergencia ante la vulnerabilidad crítica 'HTTP2Shell' en Brotli
Blog sobre informática, tecnología y seguridad con manuales, tutoriales y documentación sobre herramientas y programas
blog.elhacker.net
November 3, 2026 at 3:00 PM
HTTP2Shell: el descompresor Brotli que llevan Node.js, Python y .NET permite ejecutar código con datos manipulados. Si descomprimes Brotli en el servidor, revisa tus dependencias.
vía @elhacker.net
vía @elhacker.net
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
📖 Read more: www.helpnetsecurity.com/2026/11/03/p...
#cybersecurity #cybersecuritynews #patching #virtualpatching #vulnerabilitymanagement
📖 Read more: www.helpnetsecurity.com/2026/11/03/p...
#cybersecurity #cybersecuritynews #patching #virtualpatching #vulnerabilitymanagement
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up - Help Net Security
HTTP2Shell reveals the gap between AI bug discovery and fixes. Sweet Security Virtual Patching blocks attacks while patches arrive.
www.helpnetsecurity.com
November 3, 2026 at 12:09 PM
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
📖 Read more: www.helpnetsecurity.com/2026/11/03/p...
#cybersecurity #cybersecuritynews #patching #virtualpatching #vulnerabilitymanagement
📖 Read more: www.helpnetsecurity.com/2026/11/03/p...
#cybersecurity #cybersecuritynews #patching #virtualpatching #vulnerabilitymanagement
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
www.wordfence.com/blog/2026/11...
www.wordfence.com/blog/2026/11...
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unof...
www.wordfence.com
November 2, 2026 at 6:19 PM
HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
www.wordfence.com/blog/2026/11...
www.wordfence.com/blog/2026/11...
Another day, another critical server exploit:
www.cve.org/CVERecord?id...
Out-of-Bounds Write in Google Brotli Decoder
AKA Node2Shell, Broccoli2Shell, or HTTP2Shell
9.2 CVE rating
Barely noon on Monday.
www.cve.org/CVERecord?id...
Out-of-Bounds Write in Google Brotli Decoder
AKA Node2Shell, Broccoli2Shell, or HTTP2Shell
9.2 CVE rating
Barely noon on Monday.
www.cve.org
November 2, 2026 at 5:35 PM
Another day, another critical server exploit:
www.cve.org/CVERecord?id...
Out-of-Bounds Write in Google Brotli Decoder
AKA Node2Shell, Broccoli2Shell, or HTTP2Shell
9.2 CVE rating
Barely noon on Monday.
www.cve.org/CVERecord?id...
Out-of-Bounds Write in Google Brotli Decoder
AKA Node2Shell, Broccoli2Shell, or HTTP2Shell
9.2 CVE rating
Barely noon on Monday.
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected
www.aikido.dev/blog/python-...
www.aikido.dev/blog/python-...
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected.
The Brotli flaw behind Node2Shell (CVE-2026-111497) affects many libraries and applications using HTTP with Brotli or brotlicffi installed. Check your versions and upgrade to the fix.
www.aikido.dev
November 2, 2026 at 1:03 PM
Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected
www.aikido.dev/blog/python-...
www.aikido.dev/blog/python-...
Die #Brotli #Schwachstelle CVE-2026-111497 reicht über node.js hinaus. Daher prüfen, was betroffen ist und reagieren
borncity.com/blog/2026/10...
borncity.com/blog/2026/10...
HTTP2Shell: Brotli-Sicherheitslücke CVE-2026-111497 über Node.js hinaus prüfen
Seit einigen Tagen ist ja eine Schwachstelle (CVE-2026-111497) im Brotli-Decoder von Node.js bekannt geworden. Es gibt zwar Updates, aber inzwischen ist klar, dass die Brotli-Bibliotheken in mehr…
borncity.com
October 31, 2026 at 6:41 PM
Die #Brotli #Schwachstelle CVE-2026-111497 reicht über node.js hinaus. Daher prüfen, was betroffen ist und reagieren
borncity.com/blog/2026/10...
borncity.com/blog/2026/10...
Microsoft releases emergency .NET patches for critical Brotli flaw buff.ly/fZbCzyH
Microsoft releases emergency .NET patches for critical Brotli flaw
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
ift.tt
October 30, 2026 at 8:44 PM
Microsoft releases emergency .NET patches for critical Brotli flaw buff.ly/fZbCzyH
HTTP2Shell? I wish there was a specific reason listed beyond proactivity :[
October 30, 2026 at 4:34 PM
HTTP2Shell? I wish there was a specific reason listed beyond proactivity :[
With Sniper: Auto-Exploiter, confirm which services are actually exploitable, with proof, then validate the patch.
KEV status means “patch today.” Validation tells you which services to fix first. Part of the Exploit plan.
#offensivesecurity #ethicalhacking
KEV status means “patch today.” Validation tells you which services to fix first. Part of the Exploit plan.
#offensivesecurity #ethicalhacking
Node2Shell/HTTP2Shell - Brotli Decoder Remote Code Execution (CVE-2026-111497)
An unauthenticated attacker who can send Brotli-compressed request bodies to the application or proxy, or make it fetch Brotli-compressed responses from a server they control, can corrupt process memo...
pentest-tools.com
October 30, 2026 at 2:27 PM
With Sniper: Auto-Exploiter, confirm which services are actually exploitable, with proof, then validate the patch.
KEV status means “patch today.” Validation tells you which services to fix first. Part of the Exploit plan.
#offensivesecurity #ethicalhacking
KEV status means “patch today.” Validation tells you which services to fix first. Part of the Exploit plan.
#offensivesecurity #ethicalhacking
PHP publica paquetes nuevos para Windows (8.5.12-1, 8.4.27-1, 8.3.36-1, 8.2.35-1) con Brotli 1.2.1 por HTTP2Shell: en Windows se alcanza vía cURL con la descompresión automática.
PHP: News Archive - 2026
PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.
www.php.net
October 30, 2026 at 1:00 PM
PHP publica paquetes nuevos para Windows (8.5.12-1, 8.4.27-1, 8.3.36-1, 8.2.35-1) con Brotli 1.2.1 por HTTP2Shell: en Windows se alcanza vía cURL con la descompresión automática.
HTTP2Shell: The Brotli Vulnerability That Extends beyond Node.js https://packetstorm.news/news/view/46754 #news
October 29, 2026 at 5:04 PM
HTTP2Shell: The Brotli Vulnerability That Extends beyond Node.js https://packetstorm.news/news/view/46754 #news
Solusi praktis dan cepat buat nangani #http2shell sebelum semua kode di-patch adalah blokir di #reverseproxy semua request POST/PUT/PATCH yang ada request header "Content-Encoding".
Tentu saja, yang paling ideal adalah patch semua servis yang beresiko.
Tentu saja, yang paling ideal adalah patch semua servis yang beresiko.
October 29, 2026 at 4:16 PM
Solusi praktis dan cepat buat nangani #http2shell sebelum semua kode di-patch adalah blokir di #reverseproxy semua request POST/PUT/PATCH yang ada request header "Content-Encoding".
Tentu saja, yang paling ideal adalah patch semua servis yang beresiko.
Tentu saja, yang paling ideal adalah patch semua servis yang beresiko.
HTTP2Shell - Brotli-Sicherheitslücke geht über Node.js hinaus
#Brotli #BrotliCode @CheckPointSW #Cybersecurity #Cybersicherheit #HTTP2Shell #Node_js #Node2Shell #Schwachstelle #Sicherheitslücke
netzpalaver.de/2026/...
#Brotli #BrotliCode @CheckPointSW #Cybersecurity #Cybersicherheit #HTTP2Shell #Node_js #Node2Shell #Schwachstelle #Sicherheitslücke
netzpalaver.de/2026/...
October 29, 2026 at 1:58 PM
HTTP2Shell - Brotli-Sicherheitslücke geht über Node.js hinaus
#Brotli #BrotliCode @CheckPointSW #Cybersecurity #Cybersicherheit #HTTP2Shell #Node_js #Node2Shell #Schwachstelle #Sicherheitslücke
netzpalaver.de/2026/...
#Brotli #BrotliCode @CheckPointSW #Cybersecurity #Cybersicherheit #HTTP2Shell #Node_js #Node2Shell #Schwachstelle #Sicherheitslücke
netzpalaver.de/2026/...
HAProxy Community and HAProxy Enterprise are NOT vulnerable to the new HTTP2Shell vulnerability (CVE-2026-111497). But your backend applications might still be at risk.
You can use HAProxy to block the attack vector at the edge while you patch your fleet: www.haproxy.com/blog/haproxy...
You can use HAProxy to block the attack vector at the edge while you patch your fleet: www.haproxy.com/blog/haproxy...
HAProxy is not vulnerable to HTTP2Shell (CVE-2026-111497)
HAProxy is not vulnerable to Brotli CVEs (HTTP2Shell) because it doesn't provide Brotli decoding. However, it can help protect vulnerable backends by blocking potentially dangerous requests.
www.haproxy.com
October 29, 2026 at 1:20 PM
HAProxy Community and HAProxy Enterprise are NOT vulnerable to the new HTTP2Shell vulnerability (CVE-2026-111497). But your backend applications might still be at risk.
You can use HAProxy to block the attack vector at the edge while you patch your fleet: www.haproxy.com/blog/haproxy...
You can use HAProxy to block the attack vector at the edge while you patch your fleet: www.haproxy.com/blog/haproxy...
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
Die US-Cybersicherheitsbehörde CISA warnt vor der aktiv ausgenutzten Sicherheitslücke HTTP2Shell in der Kompressionsbibliothek Brotli. Auch Sicherheitsforscher haben erste Angriffsversuche registriert...
winfuture.de
October 29, 2026 at 12:28 PM
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
Die US-Cybersicherheitsbehörde CISA warnt vor der aktiv ausgenutzten Sicherheitslücke HTTP2Shell in der Kompressionsbibliothek Brotli. Auch Sicherheitsforscher haben erste Angriffsversuche registriert...
winfuture.de
October 29, 2026 at 12:28 PM
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
winfuture.de/news,162288....
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #HTTP2Shell #HTTP
Eine kritische Sicherheitslücke in Googles Kompressionsbibliothek #Brotli wird aktiv attackiert. Betroffen sind unter anderem #Nodejs und Virtualisierungslösungen von VMware.
HTTP2Shell: Schwachstelle in Googles Brotli wird aktiv angegriffen
winfuture.de
October 29, 2026 at 12:14 PM
Eine kritische Sicherheitslücke in Googles Kompressionsbibliothek #Brotli wird aktiv attackiert. Betroffen sind unter anderem #Nodejs und Virtualisierungslösungen von VMware.
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
www.bleepingcomputer.com
October 29, 2026 at 8:56 AM
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
www.bleepingcomputer.com
October 29, 2026 at 8:56 AM
CISA warns of hackers now exploiting critical Node2Shell flaw
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
#hackernews #news
COGNOSCERE Tech Brief — 2026-10-29
CVE-2026-111497, dubbed HTTP2Shell, is a CVSS 9.2 out-of-bounds write in Google'
https://youtube.com/watch?v=e82faCmcueI
https://www.cognoscerellc.com/news
CVE-2026-111497, dubbed HTTP2Shell, is a CVSS 9.2 out-of-bounds write in Google'
https://youtube.com/watch?v=e82faCmcueI
https://www.cognoscerellc.com/news
October 29, 2026 at 8:11 AM
COGNOSCERE Tech Brief — 2026-10-29
CVE-2026-111497, dubbed HTTP2Shell, is a CVSS 9.2 out-of-bounds write in Google'
https://youtube.com/watch?v=e82faCmcueI
https://www.cognoscerellc.com/news
CVE-2026-111497, dubbed HTTP2Shell, is a CVSS 9.2 out-of-bounds write in Google'
https://youtube.com/watch?v=e82faCmcueI
https://www.cognoscerellc.com/news
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free
The root-cause fix will take weeks; protection can’t wait
#hackernews #news
The root-cause fix will take weeks; protection can’t wait
#hackernews #news
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free
The root-cause fix will take weeks; protection can’t wait
hackernoon.com
October 29, 2026 at 3:04 AM
Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free
The root-cause fix will take weeks; protection can’t wait
#hackernews #news
The root-cause fix will take weeks; protection can’t wait
#hackernews #news