Déjà corrigée dans Node.js et .NET, la vulnérabilité CVE-2026-111497 est désormais exploitée par des pirates. La CISA appelle ...
CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...
Eine Schwachstelle in einer weit verbreiteten Komprimierungsbibliothek betrifft Node.js, Python und weitere Systeme. So ...
According to information technology industry sources on Oct. 26, cybersecurity firm Aikido Security discovered a remote code ...
An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
Multiple tech companies and projects have recently pushed patches for a vulnerability called "HTTP2Shell" which could enable remote code execution (RCE) attacks, similar to the recent "PHP2Shell" ...
The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.
구글이 개발한 압축 라이브러리 ‘브로틀리’(Brotli)에서 메모리 손상을 일으키는 보안 취약점이 발견되면서 주요 소프트웨어 개발 환경에 긴급 업데이트가 이어지고 있다. 노드제이에스(Node.js)에서 처음 확인된 결함이 ...
Node2Shell漏洞存在於Brotli解壓縮程式庫,除了Node.js,其他開發工具及應用程式也可能受到影響。由於部分軟體自行內建Brotli元件,即使企業已更新Node.js,仍需確認其他軟體是否使用尚未修補的版本 ...
ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock Node.js. Patch ...