Cve-2026-111497 on it-learn.io | IT, Networking & Cybersecurity Bloghttps://blog.it-learn.io/tags/cve-2026-111497/Recent content in Cve-2026-111497 on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usTue, 27 Oct 2026 00:00:00 +0000HTTP2Shell Brotli RCE - CVE-2026-111497 CVSS 9.2https://blog.it-learn.io/posts/2026-10-27-http2shell-brotli-rce-cve-2026-111497-cvss-9-2/Tue, 27 Oct 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/posts/2026-10-27-http2shell-brotli-rce-cve-2026-111497-cvss-9-2/Two critical cross-ecosystem RCEs are actively exploited today. HTTP2Shell (CVE-2026-111497) turns a Brotli decoder bug into unauthenticated code execution across every major runtime. PHP2Shell (CVE-2026-109618/109619) lands on CISA KEV with a Thursday patch deadline. Plus the Gheist campaign is stealing secrets from GitHub Enterprise repos at scale.