Security
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
The Hacker News·October 23, 2026·1 min read
Imperva researchers demonstrated a Node2Shell RCE exploit on an official Node.js build using crafted Brotli data. The proof of concept ran code on Node.js 24.22.0 for Linux arm64, with no debugger or custom build, by feeding malicious data to the bundled Brotli decoder (CVE-2026-111497). Node.js has disclosed the flaw.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.