Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up

Summary by Cyber Security News3 Nov 2026, 07:00 CET

About this summary. This is a short excerpt from the description that Help Net Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.helpnetsecurity.com/2026/11/03/product-showcase-sweet-security-virtual-patching/

Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up — Image: Help Net Security

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late September during a high-compute red-teaming campaign. Finding bugs is getting faster.

Read the full article at Help Net Security →

Source attribution: headline and facts are from Help Net Security (helpnetsecurity.com). Summary method: excerpt of the source description. See our source attribution policy.