Accessibility
Display
Text
Warning The vulnerabilities PHP2Shell and HTTP2Shell are being heavily exploited right now. Many websites and servers are affected. Please check here first whether you are affected. Am I affected?
HTTP2Shell is the nickname for CVE-2026-111497, a critical flaw in the Brotli compression library. Attackers can crash programs, read memory and sometimes run code without logging in.
Fixed versions: Brotli 1.0.10, 1.1.1, 1.2.1; Node.js 22.23.4, 24.22.1, 26.12.1.
office [at] vetosec [dot] at · vetosec.at/contact/
Contact
Briefly describe your situation. We help you assess it and plan the next step. Reply within 24 hours on working days.
Notice
The following external website is beyond our control. We accept no liability for its content, privacy practices or security. You use it at your own risk.
Safe travels! The new tab is opening.
Your contact
Available, Mon to Fri 9am to 5pmCurrently outside office hours