CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Teaser from the source
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Node2Shell
Other advisories
- CriticalCVE-2026-111497Out-of-bounds write in the brotlicffi decoder ("Node2Shell") also affects the PyPI Brotli package
- CriticalCVE-2026-111497Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CriticalCVE-2026-111497Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
- CriticalCVE-2026-106071Node2Shell / HTTP2Shell: Brotli RCE (CVE-2026-111497) in Node.js, Python, Envoy and Istio + Node.js October releases
Other news entries
- CISA warns of hackers now exploiting critical Node2Shell flawNewsBleepingComputer
- Node2Shell puts Microsoft and Node.js on Brotli patch dutyNewsCSO Online
- Microsoft releases emergency .NET patches for critical Brotli flawNewsBleepingComputer
- Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python PackagesNewsSecurityWeek
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli DataNewsThe Hacker News
- Brotli-Decoder-Lücke nicht nur in Node.js, sondern auch in Bun, Python und mehrNewsheise Security
Source: https://www.securityweek.com/cisa-warns-of-node2shell-exploitation-as-honeypots-log-attack-attempts/
ID