HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites wordfence.com

1
Iain 15 minutes ago in Security 0

Wordfence explains the critical Brotli flaw, CVE-2026-111497, which goes by several names including HTTP2Shell, and what it means for WordPress sites. Read it if you run your own servers, as fixed Brotli versions have been out since 21 October.

Read it on Wordfence

voters
Report Article

Related Articles

  1. The WordPress Security Team Is Building AI Tools to Hunt...
  2. WordPress doesn’t ship Brotli. It’s still exposed to CVE-2026-111497