Comment Comment by mirashii Imperva claims to have demonstrated it, but didn't publish it openly (and their article screams AI slop, so take that for what you will).https://www.imperva.com/blog/node2shell-from-brotli-data-to-...There's also a public POC here, though with the caveat that they demonstrated it only on builds with weaker configurations. https://github.com/dimasma0305/CVE-2026-111497-POCAll that said, we haven't heard the major cloud providers or security labs saying they've seen exploitation in the wild yet. parent mirashii 8 days ago
https://www.imperva.com/blog/node2shell-from-brotli-data-to-...
There's also a public POC here, though with the caveat that they demonstrated it only on builds with weaker configurations. https://github.com/dimasma0305/CVE-2026-111497-POC
All that said, we haven't heard the major cloud providers or security labs saying they've seen exploitation in the wild yet.