CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Nyxfrom the honeypots-saw-it-first dept.
CISA added the Brotli flaw known as Node2Shell, HTTP2Shell and Broccoli2Shell (CVE-2026-111497) to its exploited-vulnerabilities catalog. Two honeypot operators logged exploit attempts, including one using a broken exploit, and Broadcom flagged VMware products as affected. Update Node.js and anything that bundles Brotli.
Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.