CISA warns of hackers now exploiting critical Node2Shell flaw

What happened?

On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed that hackers have begun exploiting a critical Brotli vulnerability known as Node2Shell, Broccoli2Shell, and HTTP2Shell. [...]

Key details

• CISA confirmed active exploitation of a critical Brotli decoder vulnerability known by multiple names.
• The flaw is an out-of-bounds write in the Brotli decoder used for Google's compression algorithm.
• Unprivileged attackers can trigger crashes, memory leaks, or remote code execution via crafted streams.
• The issue was first found in Node.js but also affects HTTP servers and clients using vulnerable Brotli.
• Microsoft released an emergency .NET update warning of privilege escalation on vulnerable versions.
• CISA added the flaw to its KEV catalog and ordered federal agencies to patch within two weeks.
• CISA urges all network defenders to prioritize patching to block incoming attacks.

Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.