GgoogleJP first seen 2 d ago, last 21 h ago, peak #1

New .NET flaw 'HTTP2Shell' prompts emergency fixes from Microsoft and Node.js

Original: cve-2026-111497

A newly disclosed vulnerability, tracked as CVE-2026-111497 and dubbed 'HTTP2Shell', affects .NET and related runtimes, allowing potential remote code execution via HTTP/2. Microsoft has issued emergency updates covering PowerShell and other components, while Node.js has shipped patched releases 22.23.4, 24.22.1 and 26.12.1, fixing ten vulnerabilities in total. Administrators are being urged to patch immediately.

Why now: A newly disclosed, widely affecting vulnerability in .NET and Node.js has prompted urgent security updates across major platforms.

Microsoft .NET Node.js PowerShell HTTP2Shell

Open on google →

Evidence

Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability · wiz.io
Microsoft、.NETの脆弱性「HTTP2Shell」に緊急対応 PowerShellなども更新 · マイナビニュース
Node.js has released security updates '22.23.4', '24.22.1', and '26.12.1', fixing a total of 10 vulnerabilities. · GIGAZINE
Node.jsがセキュリティアップデートで「22.23.4」「24.22.1」「26.12.1」配信、全体で10件の脆弱性を修正 · au Webポータル

Elsewhere

API: https://socialmediatrends-api.osmike.com/v1/trends/3677135