CVE-2026-111497

Latest news

1. 23 Oct
   Researchers demonstrate Node2Shell RCE against Node.js Brotli decoder

   Imperva researchers showed a proof‑of‑concept remote code execution using crafted Brotli data against an official Node.js 24.22.0 Linux arm64 build (CVE-2026-111497). Node.js disclosed the flaw and released fixes on October 21; affected applications that decode untrusted Brotli data should update to patched releases.

   Security · 1 source

   

Articles

No articles about CVE-2026-111497 yet.