CVE-2026-111497 — Cybersecurity News

Latest News

Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data

Node2Shell: Researchers Achieve RCE on Stock Node.js Builds via Malicious Brotli Data

RedSide Security October 23, 2026 Vulnerability 19 views

Imperva researchers demonstrated Node2Shell, a proof-of-concept RCE that exploits the Brotli decoder bundled in official Node.js builds (CVE-2026-111497) to run attacker code on a stock Node.js 24.22.0 Linux arm64 image.

RCE Vulnerability Disclosure Node.js Brotli CVE-2026-111497 Imperva Runtime Security
Continue reading: Node2Shell: Researchers Achieve RCE on Stock Node.…
PCAPGraph: Threat Hunting at the Speed of Triage PCAPGraph: Threat Hunting at the Speed of Triage
Open-Source Network Discovery & Topology Mapping Open-Source Network Discovery & Topology Mapping
RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Grap…