#Node2Shell - Twitter Etiketi

yaklaşık 1 saat önce

#Node2shell > #Python2shell > #HTML2shell (echale la culpa a #Brotli) https://t.co/TiZclIOrVb vía @Seguinfo #PHP2Shell #Cybersecurity #Ciberseguridad

javifelices's tweet photo. #Node2shell > #Python2shell > #HTML2shell (echale la culpa a #Brotli) https://t.co/TiZclIOrVb vía @Seguinfo

#PHP2Shell #Cybersecurity #Ciberseguridad https://t.co/8sIkFIvUlT

0

24

PrivacySafe

@GetPrivacySafe

yaklaşık 6 saat önce

We have released tools to help mitigate, detect, and audit systems for #PHP2Shell, #Node2Shell, #HTTP2Shell, and 30+ other CVEs from the past month. Free to copy, remix, share👇https://t.co/BxvzedERFA

Cybersecurity and Infrastructure Security Agency @CISAgov

yaklaşık 21 saat önce

Update to #PHP2Shell Alert: SIGMA rule helps identify potentially suspicious activity & incorporated partner resources. If your org can't update immediately or uses unsupported PHP 8.1 or earlier versions, take affected PHP-based systems offline until patched or updated.

14

224

67

51

19K

0

3

2

0

228

Umair Saeed @UmairGe66

yaklaşık 13 saat önce

#PHP2Shell #Node2Shell

0

49

yang_yi_cn

@yang_yi_cn

yaklaşık 15 saat önce

Many hours later, in the Black October as I was fixing the AI found #PHP2Shell #Node2Shell #HTTP2Shell, I was to remember that distant afternoon when I discovered Shogun 2: fall of the samurai, when the charging samurais facing the machine guns first time in the history.

0

176

Prado Castro @apradoc

yaklaşık 15 saat önce

#CVEALERT CVE-2026-11497 #Node2Shell "El aviso de seguridad de Node.js, publicado el 21 de octubre de 2026, confirma que la falla puede permitir la ejecución remota de código y afecta a las líneas de lanzamiento 22.x, 24.x y 26.x."

Cyber Security News

@The_Cyber_News

1 gün önce

🚨 Node2Shell Node.js RCE Exploit Lets Attackers Execute Malicious Code Details: https://t.co/IPY97YNfUf Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in the Brotli decoder bundled with Node.js. The Node.js security advisory, published on October 21, 2026, confirms that the flaw can allow remote code execution and affects the 22.x, 24.x, and 26.x release lines. Fixes are available across all three branches. The code delivered with the compressed data created a marker file that the test application was not instructed to produce. #CybersecurityNews

The_Cyber_News's tweet photo. 🚨 Node2Shell Node.js RCE Exploit Lets Attackers Execute Malicious Code

Details: https://t.co/IPY97YNfUf

Node2Shell, a working exploit that lets an attacker run code inside a Node.js application through specially crafted, Brotli-compressed data. The research targets CVE-2026-111497, a high-severity memory flaw in the Brotli decoder bundled with Node.js.

The Node.js security advisory, published on October 21, 2026, confirms that the flaw can allow remote code execution and affects the 22.x, 24.x, and 26.x release lines. Fixes are available across all three branches. The code delivered with the compressed data created a marker file that the test application was not instructed to produce.

#CybersecurityNews

6

422

91

132

28K

0

63

Patrick Senti @productaizery

yaklaşık 15 saat önce

@ClassicGamerTWR I agree in general however brotli #PHP2Shell #node2shell et al are not overblown, neither is eMudhra

1

0

100

Larm182 @larm182luis

yaklaşık 17 saat önce

#CyberSecurity #PenTesting #NodeJS #CVE #BugBounty #RCE #WebSecurity #HDGC #Node2Shell #InfoSec #RedTeam #VulnerabilityResearch #Express #PoC

0

77

Pedram Soheil

@psoheil

yaklaşık 20 saat önce

#Node2Shell: Critical Node.js Vulnerability Enables Remote Code Execution Imperva researchers have demonstrated how a vulnerability in Node.js’s bundled Brotli decoder can allow attackers to execute arbitrary code through maliciously crafted compressed data. Key findings: • Remote Code Execution: CVE-2026-111497 can enable attackers to execute code within vulnerable Node.js application processes. • Multiple Attack Paths: Exploitation was demonstrated through both compressed HTTP responses processed by Node.js fetch() and incoming Brotli request bodies handled by configured Express middleware. • Confirmed Impact: Researchers successfully demonstrated code execution using the official Node.js 24.22.0 Linux ARM64 image. The patched version rejected the same malicious inputs. • Immediate Mitigation: Upgrade affected Node.js deployments to fixed versions: 22.23.4, 24.22.1, or 26.12.1, or newer releases in the respective supported branches. • Defense in Depth: Review container images, identify applications processing untrusted Brotli data, and consider WAF protections while deploying permanent fixes. This vulnerability highlights why runtime security and rapid patching are just as important as securing application code. A flaw deep within a runtime can expose otherwise legitimate applications to remote code execution. #Cybersecurity #NodeJS #ApplicationSecurity #RemoteCodeExecution #VulnerabilityManagement #DevSecOps #InfoSec https://t.co/A7vNp0Wlay

0

71

Cyvigilant @cyvigilant

yaklaşık 21 saat önce

🚨Node2Shell (CVE-2026-111497): Malicious Brotli input can trigger memory corruption and potential RCE in Node.js. Patch to 22.23.4, 24.22.1 or 26.12.1 or newer supported versions. Rebuild containers. Verify production. #NodeJS #Node2Shell #Cyvigilant

cyvigilant's tweet photo. 🚨Node2Shell (CVE-2026-111497): Malicious Brotli input can trigger memory corruption and potential RCE in Node.js.

Patch to 22.23.4, 24.22.1 or 26.12.1 or newer supported versions. Rebuild containers. Verify production.

#NodeJS #Node2Shell #Cyvigilant https://t.co/CdknN5dYkS

0

68

Gautcho @devgaucho

yaklaşık 21 saat önce

por isso que é melhor usar padrões e tecnologias consolidadas: se ainda usássemos só HTTP 0.9 sem request body não teria bug de upload; se ainda usássemos só deflate e gzip não teria bug no brotli bugs geralmente acontecem quanto tentamos reinventar a roda #php2shell #node2shell

Gautcho @devgaucho

3 gün önce

um velho truque apache 🪶 pra proteger o php 🐘 contra o CVE-2026-109618 e o CVE-2026-109619

1

2

1

0

666

0

1

320

Cyb3rVolt3x

@AndraxPentester

yaklaşık 21 saat önce

Patched Node for Node2Shell (CVE-2026-111497)? Don't check process.versions.brotli. Node fixed its bundled Brotli without bumping it: patched 24.22.1 still says 1.2.0, patched 22.23.4 says 1.1.0. Trust node --version. npm audit won't catch it either. #Node2Shell #NodeJS

AndraxPentester's tweet photo. Patched Node for Node2Shell (CVE-2026-111497)? Don't check process.versions.brotli.

Node fixed its bundled Brotli without bumping it: patched 24.22.1 still says 1.2.0, patched 22.23.4 says 1.1.0.

Trust node --version. npm audit won't catch it either.

#Node2Shell #NodeJS https://t.co/0wTQxhaPaN

1

0

123

ExploitGrid @exploitgrid

yaklaşık 23 saat önce

🚨 #Python packages are vulnerable to RCE via the same #node2shell flaw, CVE-2026-111497. You may be affected if you use the Brotli library, a very popular dependency (100M downloads/month). Other major services are likely affected too. #Aikido detects this. Patches available.

0

92

波乗野郎

@shojiueda

yaklaşık 24 saat önce

#php2shell #node2shell #http2shell がKEVに登録されるの日が来るのだろうか... しばらくは無いかもでも、読めない...

0

1

0

491

Gertjan A. @major7

yaklaşık 24 saat önce

I have some hobby projects in scala, node running in a framework with a php dashboard, I spent several evenings updating stuff. as patches come out not to mention having to do it at work And i'm afraid this is only the beginning #php2shell #node2shell #eMudhra

0

67

The Hacker News @TheHackersNews

1 gün önce

‼️ Alert - Critical Brotli flaw behind #Node2Shell RCE goes far beyond Node.js. Bun, Python Brotli packages, Envoy, Istio and other widely used software are also affected by the same CVE-2026-111497 memory-corruption vulnerability. Read full details ↓ https://t.co/Znn8SGEdBu

25

516

122

195

70K

ケイ | IT・セキュリティ系Webライター @Teeeda_worker

1 gün önce

#HTTP2Shell や #Node2shell として話題になってる脆弱性について各方面から情報収集しました。 CVSS9.2で、緊急度も高めです。既に修正バージョンでてるので、昨今の情勢も他踏まえて早めの対策が重要ですm(*_ _)m https://t.co/fF3Cn4M4NA

0

1

2

240

波乗野郎

@shojiueda

1 gün önce

#node2shell CVE-2026-111497 が朝起きたら #http2shell に化けていたでござる。ざっと調べてたけど、週末に緊急対応するほどでもないかなと言う印象。 PythonやApacheなどに影響があるが、標準構成ではBrotliを扱わない設定になっていると思うので。有識者の皆さん、どうでしょう？

Aikido

@AikidoSecurity

1 gün önce

Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.” A significant blast radius. This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression. Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.