MEDIUMVulnerability
Global

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

·Source: The Hacker News

Updated:

Executive Summary

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497). Node.js disclosed the flaw

Analysis

Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their "Node2Shell" proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no debugger or custom build, by feeding crafted data to the bundled Brotli decoder (CVE-2026-111497). Node.js disclosed the flaw

Indicators of Compromise (1)

CVE (1)
CVE-2026-111497
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 23, 2026.

Related Threats

CRITICALVulnerability

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Cognitive Credit raises $40m to scale specialist data and AI for credit markets

Corporate credit data, analytics, and AI technology provider Cognitive Credit has closed a $40 million strategic growth investment led by Summit Partners with participation from ETFS Capital.

Finextra
LOWVulnerability

Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)

[object Object]

CVE-2026-111497
r/cybersecurity