Node2Shell

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions1
First seenOct 23, 2026
Last mentioned7d ago

Timeline

1 articles · newest first

Node2Shell PoC runs code through Node.js Brotli decoder flaw

Imperva’s proof of concept worked on Node.js 24.22.0; fixed builds are 22.23.4, 24.22.1, and 26.12.1.

Cyber Security NewsOct 23, 14:11 UTC · 7d agoExploit / PoCCVE-2026-1114974 · 1 read

Related CVEs

by mentions

CVE-2026-11149783%9.2
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
published 8d agoGoogle BrotliKEVPoC ×25

Appears with

Impervaorganization · 1
Expressproduct · 1
Node.jsproduct · 1
body-parserproduct · 1

Entities are extracted by the model from each article. First seen Oct 23, 2026, last mentioned 7d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.