news.mlab.sh
Back to the feed
vulnerability

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Published · Updated · Source: The Hacker News · [email protected] (The Hacker News)
HighCVSS 9.2
Image: The Hacker News
Summary

Researchers at Imperva demonstrated a Remote Code Execution (RCE) vulnerability, CVE-2026-111497, in Node.js applications due to crafted Brotli data. Vercel added rules to block the attack in inbound requests, but this does not replace updating.

Read the full article at The Hacker News
Add news.mlab.sh as a preferred source on Google

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Also covered by 1 other source(s)

Report an error
Confirmed errors are fixed and listed on /corrections.