59 matches found
Exploit for CVE-2026-111497
Node2Shell — CVE-2026-111497 PoC Out-of-bounds write in Node...
Exploit for CVE-2026-111497
CVE-2026-111497 lab RCE/DoS checker A lab-only exact-profil...
brotli-checker
Brotli Checker Brotli Checker finds copies of the Brotli decoder that may need an update for CVE-2026-111497. Install it as a Claude Code or Codex skill, then ask it to check your project. The skill scans source, dependencies, app packages, and unpacked container filesystems. It checks source...
Exploit for CVE-2026-111497
CVE‑2026‑111497 – Node.js Brotli Decoder...
Exploit for CVE-2026-111497
Node2Shell / HTTP2Shell — CVE-2026-111497 Response Kit Auditi...
Exploit for CVE-2026-111497
CVE-2026-111497 — Node.js Brotli Decoder OOB Write → RCE !L...
Exploit for CVE-2026-111497
node-brotli-check Check whether a Node.js runtime is fixed fo...
Exploit for CVE-2026-111497
CVE-2026-111497 — Node2Shell Research Arkango Security Re...
node2shell-poc
Node2Shell — CVE-2026-111497 Lab Docker reproductible + PoC o...
Node.js Patches Brotli Remote Code Execution Flaw: Find Vulnerable Runtimes Before Attackers Do
Executive Summary On October 21, 2026, Node.js released fixes for 10 vulnerabilities across its three supported release lines: 22.x, 24.x, and 26.x. Four are rated High. The most severe, CVE-2026-111497, is an out-of-bounds write in the bundled Brotli decoder that Node.js says permits remote code...
node-exploit-poc
Node2Shell — CVE-2026-111497 pentest kit Detection, exploit-v...
Exploit for CVE-2026-111497
🟢 Node2Shell: CVE-2026-111497 Lab & PoC !CVSShttps://img...
Vulnerability in Google Brotli-decoder
Google has discovered a vulnerability in the Brotli decompression library. This library is used in Node.js. An unauthorized malicious actor can exploit this vulnerability to process specially crafted Brotli-compressed data remotely. Successful exploitation could lead to a denial-of-service attack...
BIT-NODE-2026-111497
A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
BIT-NODE-MIN-2026-111497
A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell " proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by...
Node.js 26.x Security Release Check
A Bash tool identifies installed and running Node.js versions affected by the October 2026 security release, including a Brotli decoder out-of-bounds write that may permit remote code execution...
Vaadin and the October 2026 Node.js security releases
A deployed Vaadin application does not run Node.js, so it is not exposed to the vulnerabilities fixed in the Node.js security releases of 21 October 2026. Vaadin uses Node.js only to build the frontend and to run development mode, which means the exposure, where there is any, is in build and...
Node.js 26.x Brotli Decoder Remote Code Execution Mitigation
Terraform configuration and a verification script provide an interim Azure Application Gateway WAFv2 mitigation for Node.js versions 22.x, 24.x, and 26.x affected by a Brotli decoder out-of-bounds write that can permit remote code execution...