HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites 

HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites 

SecurityVendor
Yanac

On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unofficial names, including HTTP2Shell, Node2Shell, and Brotli2Shell.
The post HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites appeared first on Wordfence.WordfenceRead More