WORLD WATCH · October 28, 2026 · NEWS
CISA adds Node2Shell to KEV
CISA added the Brotli flaw to its KEV catalog for Node2Shell exploitation.
- Reported by
- SecurityWeek
- Outlets reporting
- 1
- Category
- NEWS
- Newest report
- October 28, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- CISA added the Brotli flaw to KEV.
- Honeypots logged Node2Shell exploitation attempts.
- One attempt used a broken exploit.
What happened
The report comes from SecurityWeek. CISA added the Brotli flaw to its KEV catalog. Two honeypot operators logged Node2Shell exploitation attempts. One logged attempt used a broken exploit.
Why it matters
Active exploitation attempts for the Brotli flaw are now logged in honeypots. Inclusion in the KEV catalog indicates a known flaw under observed exploitation. At least one actor used a broken exploit in an attempt.
What to do
- Check for the Brotli flaw in affected assets.
- Track KEV entries for Node2Shell changes.
- Monitor logs for Node2Shell exploitation attempts.
SOURCE: INTEL128 WORLD WATCH (UPDATED OCT 28, 2026). This brief summarizes reporting by SecurityWeek. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.