GitHub Repos· Oct 24, 2026· by googlesky🔍 CVE-2026-111497

googlesky/CVE-2026-111497

Open Original Article ↗
PoC, Docker lab, and technical report for CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder invalid block-switch OOB write; validated errno differential and weaponized remote DoS, RCE analysis included.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#brotli#cve-2026-111497#denial-of-service#javascript#node2shell#nodejs#out-of-bounds-write#poc#CVE-2026-111497

More Writeups Like This

GitHub Repos

TheFool-TAROT/CVE-2026-111497-brotli-pwn

by TheFool-TAROT
blog.qualys.com

Waiting on a Node.js Upgrade? Build a Stopgap with the Controls You Own

by Bhagyashree Thorat
blog.qualys.com

Node.js Patches Brotli Remote Code Execution Flaw: Find Vulnerable Runtimes Before Attackers Do

by Saeed Abbasi
GitHub Repos

canmenzo/cve-2026-93687-braces

by canmenzo