Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

By Bill Toulas · BleepingComputer · Monday, 26 October 2026 at 16:27 (1h ago) · Original article ↗

A critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest

Jaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours

The Register 1h ago

Security

Microsoft releases emergency.NET patches for critical Brotli flaw

Microsoft released emergency.NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]

BleepingComputer 2h ago

Security

Java News Roundup: JDK 28 Schedule, Oracle CPUs, eMudhra Certs, Apache POI, WildFly, Azul, BellSoft

This week's Java roundup for October 19th, 2026, features news highlighting: the proposed release schedule for JDK 28; the eMudhra Intermediate CA certificates breach; the October 2026 Critical Patch Update; Azul and BellSoft CPUs; GA releases of WildFly 42 and Apache POI 6.0;…

InfoQ 3h ago

Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patches

More Security & Privacy

UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest

Microsoft releases emergency.NET patches for critical Brotli flaw

Java News Roundup: JDK 28 Schedule, Oracle CPUs, eMudhra Certs, Apache POI, WildFly, Azul, BellSoft