AccountSubscribe

‘Node2Shell’ vulnerability (CVE-2026-111497) in active exploitation

Sophos NewsOctober 28, 2026Vulnerabilities

Read the full article at Sophos News

SecurityTabs reportupdated just nowBrotli Decompression Flaw in Node.js and Other Software Under Attack

Explained

The technology and terms in this story. Learn more

ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.

Why it was possible

The weaknesses behind this story's CVEs, from each CVE Record.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

CVE-2026-111497Critical 9.2Known exploitedEPSS 82.6%

Other sources covering the same vulnerabilities or event.

Node2Shell: Reproducing CVE-2026-111497 in the Node.js Brotli decoder

Datadog Security LabsyesterdayVulnerabilitiesCVE-2026-111497

AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497

Canadian Centre for Cyber SecurityyesterdayVulnerabilitiesCVE-2026-111497

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

The Hacker NewsyesterdayVulnerabilitiesCVE-2026-111497

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Advisories2d agoVulnerabilitiesGovernanceCVE-2026-111497 CVE-2026-48356

SANS Stormcast Tuesday, October 27th, 2026: Apple Patches 304 Vulnerabilities Incl. Exploited CoreGraphics Flaw; Threat Hunting in DShield SIEM with ELK; .NET and PHP Brotli Fixes (CVE-2026-111497)

Podcast7 minSANS Internet Storm Center StormCast3d agoVulnerabilitiesThreat IntelCVE-2026-111497

PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw

The Hacker News3d agoVulnerabilitiesEndpointCVE-2026-111497

CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

Rapid7 Blog3d agoVulnerabilitiesCVE-2026-111497

SANS Stormcast Monday, October 26th, 2026: PHP2Shell Exploit Reliability; Node.js Brotli Decoder RCE (CVE-2026-111497); Tailscale "Tailworm" Vulnerabilities; HPE ArubaOS 8/10 Patches 72 Flaws

Podcast8 minSANS Internet Storm Center StormCast4d agoVulnerabilitiesAppSecCVE-2026-111497

More in Vulnerabilities

Smart TVs can harbor unpatched security flaws and track what you watch

Help Net Securityjust nowVulnerabilities

SANS Stormcast Friday, October 30th, 2026: Local Ghidra Server for Malware Analysis Labs; Claude Finds Linux Kernel Multipath TCP RCE (CVE-2026-98432); Hugging Face Cryptomining Malware Campaign

Podcast8 minSANS Internet Storm Center StormCast2h agoVulnerabilitiesAIEndpointCVE-2026-98432

Billions stolen in Binance hack

Podcast10 minRisky Business News3h agoVulnerabilitiesThreat IntelNetwork

Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched

The Register Security6h agoVulnerabilitiesAI

Cisco security advisory (AV26-1102) - Update 1

Canadian Centre for Cyber Security9h agoVulnerabilitiesNetwork