News
cybersecurity Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster - Aikido Security cybersecurity Cisco Warns of Actively Exploited Firewall Vulnerability Allowing Remote DoS Attacks - CyberPress threat-intel Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses - GBHackers threat-intel 11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel 12 Cyber Threat Intelligence (CTI) Feeds & Services: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog - GBHackers threat-intel 12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million - SecurityWeek cybersecurity Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys - The Hacker News threat-intel Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls - GBHackers threat-intel 12 SOAR Tools: The 2026 Buyer’s Verdict Guide - GBHackers threat-intel 12 SIEM Tools: The 2026 Buyer’s Verdict Guide - GBHackers cybersecurity Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day - SecurityWeek cybersecurity Cyber Vulnerabilities Besiege Italy, Absent Clear Cause - Dark Reading cybersecurity Lumen Uncovers Secret Chinese Hacking Network Behind Years of Zero-Day Attacks on U.S. Infrastructure - CyberPress
1 / 15
All news ›
Threat Intel

CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js

GBHackers ·

CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthenticated attackers to corrupt memory, disrupt services, disclose sensitive information, or potentially execute arbitrary code through maliciously crafted compressed streams. Federal agencies have […] The post CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.