NewsBleepingComputer
CISA warns of hackers now exploiting critical Node2Shell flaw
Teaser from the source
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on exploiting
Other advisories
- CriticalCVE-2026-22313The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability …
- MediumCVE-2022-41656Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49054Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels.
- HighCVE-2026-48545Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a s…
- MediumCVE-2026-49053Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49052Missing Authorization vulnerability in Wpmet ElementsKit Elementor addons Lite allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49051Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured Access Control Security Levels.
- MediumCVE-2026-49047Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Security Levels.
Other news entries
- InfraTrust report warns of exploited flaws in critical network infrastructureNewsBleepingComputer
- Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in AttacksNewsThe Hacker News
- Luanti ContentDB breached: attacker had server access Oct 22-26, emails, password hashes and uploads exposedBreachpwn.watch
- CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach serversNewsBleepingComputer
- 'AdFection' Turns Ad Impressions Into Zero-Click Spyware DeliveryNewsDark Reading
- PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN SessionsNewsThe Hacker News
- No click required: How the ad industry became a pipeline for mercenary spywareNewsCSO Online
- Hackers exploit Collabora RCE flaw to backdoor Nextcloud serversNewsBleepingComputer
ID