NewsThe Hacker News
Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
More on Execution
Other advisories
- HighCVE-2026-61438PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
- CriticalCVE-2026-86471Apache CouchDB: Admin credentials leading to code execution as operating system user
- Not ratedosv:CVE-2026-54453OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
- Not ratedosv:CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trust
- Not ratedosv:CVE-2026-118683MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
- Not ratedosv:CVE-2026-118647n8n before 1.123.85, 2.43.5, and 2.44.1 SeaTable Trigger API Token Exposure via Execution Data
- Not ratedosv:CVE-2026-118643n8n before 1.123.85, 2.43.5, and 2.44.1 Credential Exposure via Node Execution Error Data
- Not ratedosv:CVE-2026-116778FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution
Other news entries
- Adobe, Veeam, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- Trusting Unsloth’s trust setting could mean executing malicious codeNewsCSO Online
- Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security BypassNewsThe Hacker News
- Hackers Start Probing Fresh Oracle EBS VulnerabilityNewsSecurityWeek
- Code-execution flaw in UEFI firmware affects most servers on planet EarthNewsArs Technica — Security
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionNewsThe Hacker News
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawNewsThe Hacker News
Source: https://thehackernews.com/2026/10/nodejs-brotli-decoder-bug-could-allow.html
ID