Wordfence Blog دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۹:۱۸

HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites

On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unofficial names, including HTTP2Shell, Node2Shell, and Brotli2Shell. The post HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites appeared first on Wordfence.

Vulnerabilities & Zero-Day

Read the full article at Wordfence Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

AWS Security Bulletins دوشنبه ۱۱ آبان ۱۴۰۵ · ۲۰:۱۰

CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

Bulletin ID: 2026-161-AWS Publication Date: 11/02/2026 08:30 AM PST Description: We are aware of CVE-2026-119301 in the Apache Iceberg write component, where improper neutralization of quoting syntax in SQL identifier construction could allow an authenticated user with permission to modify AWS Glue Data Catalog metadata to read any table that a separate, more privileged principal can access and write to the table tha…

Vulnerabilities & Zero-Day Databases Cloud Computing

Source

آی‌تی‌رسان دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۹:۳۰

کشف یک مسیر نفوذ به سرورهای لینوکسی با کمک هوش مصنوعی آنتروپیک

مدل آزمایشی و منتشرنشده آنتروپیک توانسته است یک آسیب‌پذیری امنیتی با شدت بحرانی در کرنل لینوکس شناسایی کند؛ نقصی که […] نوشته کشف یک مسیر نفوذ به سرورهای لینوکسی با کمک هوش مصنوعی آنتروپیک اولین بار در آی‌ تی‌ رسان منتشر شد.

Vulnerabilities & Zero-Day AI Security AI & Machine Learning

Source

Help Net Security دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۹:۲۸

CISA to federal agencies: Remediate exploited Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527)

CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog on Friday, after Ivanti updated an earlier security advisory with details about the flaws. Three flaws chained to gain a foothold CVE-2026-111357, a missing authentication for a critical function vulnerability that allows a local authenticated attacker to escalate their privileges…

Vulnerabilities & Zero-Day Identity & Access Security

Source

CERT/CC Vulnerability Notes دوشنبه ۱۱ آبان ۱۴۰۵ · ۱۹:۰۸

VU#203719: INFINITT PACS System Manager Contains Multiple Code Execution Vulnerabilities

Overview INFINITT PACS installations using System Manager versions 3.0.11.3 and 3.0.11.5 contain vulnerabilities that may allow an attacker to execute arbitrary code. INFINITT Healthcare has remediated the issues in System Manager versions 3.0.12.3 and 3.0.12.5. Description INFINITT PACS is an enterprise web-based medical imaging platform that stores, retrieves, and displays patient scans. CVE-2026-16305 An improperl…

Vulnerabilities & Zero-Day

Source