Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
ID: bbf06c81-c686-5c6c-a476-15f1710ab084
STIX ID: report--bbf06c81-c686-5c6c-a476-15f1710ab084
Feed Name: Help Net Security
HTTP2Shell (CVE-2026-111497) is a critical remote-code-execution vulnerability in Brotli decompression implementations used by Node.js, Bun, Envoy, Python and others; malformed compressed data can cause an out-of-bounds write leading to unauthenticated RCE. The report notes widespread exposure across runtimes, reproduction in Go ports used by popular frameworks, active exploitation attempts observed in a large percentage of monitored environments, slow patch releases across components, and recommends runtime detection and virtual patching (blocking process-creation syscalls) as a compensating control while permanent fixes are deployed.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.