security news – Security Blog https://blog.siteguarding.com Mon, 26 Oct 2026 18:51:03 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg security news – Security Blog https://blog.siteguarding.com 32 32 Brotli Vulnerability CVE-2026-111497: Why Patching the OS Isn’t Enough https://www.siteguarding.com/security-blog/http2shell-brotli-cve-2026-111497/ Mon, 26 Oct 2026 18:51:03 +0000 https://www.siteguarding.com/security-blog/http2shell-brotli-cve-2026-111497/ The Brotli vulnerability CVE-2026-111497, nicknamed HTTP2Shell, is a buffer overflow in Google's compression decoder that can crash processes, leak memory and allow remote code execution in Node.js, Python and .NET applications. Proof-of-concept exploits are public, and updating the system Brotli package, the fix most admins try first, leaves many deployments still vulnerable.

Source

]]>