NewsThe Hacker News
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Linked advisories
- CVE-2026-111497Google Brotli: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-111497Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder
- CVE-2026-111497Brotli vulnerability
- CVE-2026-111497Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CVE-2026-111497OSV-Eintrag
- CVE-2026-111497Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CVE-2026-111497Debian LTS brotli: security update
- CVE-2026-111497Google Brotli: Schreiben außerhalb des zugewiesenen Speichers (Out-of-bounds Write)
- CVE-2026-111497Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package
- CVE-2026-111497Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products
- CVE-2026-111497Critical Vulnerability in Node.js
- CVE-2026-111497OSV-Eintrag
- CVE-2026-111497Debian brotli: security update
- CVE-2026-111497Multiple Node.js CVEs
- CVE-2026-111497Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- CVE-2026-111497Node.js Multiple Vulnerabilities
- CVE-2026-111497Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
- CVE-2026-111497Node.js: Mehrere Schwachstellen
Affected vendors and products
More on Researchers
Other news entries
- CISA confirms PHP2Shell under attack as researchers clock successful exploitsNewsThe Register — Security
- OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsNewsThe Hacker News
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareNewsThe Hacker News
- Stolen AI Reasoning Could Help China Build Cheaper RivalsNewsSecurityWeek
- OpenAI, Anthropic disclosures spotlight growing AI containment challengeNewsCSO Online
- Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsNewsThe Hacker News
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning ActivityNewsThe Hacker News
- AI coding agents hijacked using AGENTS.md file in Downloads folderNewsBleepingComputer
Source: https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html
ID