[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQOL5qU0vpKGVLMgJW59jL0r33cJ_JgzZqiBTDT79M_0":3},{"article":4,"iocs":55,"watch_terms":80,"solutions":81,"lesson":34},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"aa620d10-c8aa-45c2-be9f-4a36d27c04f9","Node2Shell: Node.js Brotli Flaw Gets RCE Proof of Concept","node2shell-node-js-brotli-flaw-gets-rce-proof-of-concept-6faa61","Imperva's Node2Shell research shows Node.js Brotli flaw CVE-2026-111497 can give RCE. Fixes are in 26.12.1, 24.22.1 and 22.23.4.","Imperva researchers have detailed a remote code execution vulnerability in Node.js's Brotli decoder, dubbed Node2Shell. The flaw, CVE-2026-111497, allows attackers to execute arbitrary code by supplying specially crafted Brotli-compressed data. Node.js has released security updates (26.12.1, 24.22.1, and 22.23.4) to address this and nine other vulnerabilities, four of which are rated high severity.","Node.js Brotli flaw CVE-2026-111497 allows RCE; patches released for multiple versions.","https:\u002F\u002Fwww.cyberkendra.com\u002F2026\u002F10\u002Fnodejs-october-2026-security-releases-cve-2026-111497.html","https:\u002F\u002Fwww.cyberkendra.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fnodejs.webp","2026-10-22T01:47:56+00:00","2026-10-23T15:09:05.308595+00:00",8,[17,20,22,24,26,29],{"name":18,"type":19},"Node.js","product",{"name":21,"type":19},"Brotli",{"name":23,"type":19},"Express",{"name":25,"type":19},"body-parser",{"name":27,"type":28},"Imperva","vendor",{"name":30,"type":31},"TLS","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56,60,63,65,68,71,74,77],{"type":57,"value":58,"context":59},"cve","CVE-2026-111497","Node.js Brotli decoder vulnerability allowing RCE",{"type":57,"value":61,"context":62},"CVE-2026-105483","High severity TLS hostname verification bypass",{"type":57,"value":64,"context":62},"CVE-2026-106069",{"type":57,"value":66,"context":67},"CVE-2026-106072","Medium severity TLS hostname verification bypass",{"type":57,"value":69,"context":70},"CVE-2026-105482","High severity dns.resolve truncation vulnerability",{"type":57,"value":72,"context":73},"CVE-2026-105481","Medium severity HTTP keep-alive socket vulnerability",{"type":57,"value":75,"context":76},"CVE-2026-106074","Medium severity crypto.randomUUID\u002FrandomInt entropy cache vulnerability",{"type":57,"value":78,"context":79},"CVE-2026-106073","Low severity Permission Model bypass vulnerability",[27,18,21],{"controls":82,"vendors":165},[83,111,137],{"slug":84,"name":85,"problem":86,"products":87},"patch-management","Automated patch management","Known holes get closed in days, not months.",[88,96,103],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":84,"product_name":100,"url":101,"description":102},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":112,"name":113,"problem":114,"products":115},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":133,"product_name":134,"url":135,"description":136},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"slug":138,"name":139,"problem":140,"products":141},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",[142,149,157],{"vendor_slug":143,"vendor_name":27,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"imperva","\u002Fvendor-logos\u002Fimperva.png","imperva-cloud-waf","Imperva Cloud WAF","https:\u002F\u002Fwww.imperva.com\u002Fproducts\u002Fweb-application-firewall-waf\u002F","Cloud web application firewall with DDoS and bot protection.",{"vendor_slug":150,"vendor_name":151,"vendor_logo":152,"product_slug":153,"product_name":154,"url":155,"description":156},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-waf","Cloudflare WAF and DDoS protection","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fwaf\u002F","Web application firewall and unmetered DDoS mitigation for websites and APIs.",{"vendor_slug":158,"vendor_name":159,"vendor_logo":160,"product_slug":161,"product_name":162,"url":163,"description":164},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","app-and-api-protector","Akamai App & API Protector","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fapp-and-api-protector","Web application firewall, bot and DDoS protection for websites and APIs.",[166],{"slug":143,"name":27,"logo_path":144,"roles":167},[168],"reported_by"]