investigation
Experts practically demonstrated code execution in a specific vulnerable version of Node.js by exploiting the vulnerability.
A investigation by Mutaxassislar. Statements are as reported by the cited publishers — not verified by DecisionGateway.
Mutaxassislar zaiflikdan foydalanib, Node.js’ning muayyan zaif versiyasida kod bajarilishini amalda namoyish etgan.
Discussion
Related claims
The vulnerability affects some systems that use Brotli and brotlicffi libraries in Node.js, Bun, Envoy, Istio and Python.Turan Security Xavfsizlik Byulleteni · statementExploit code has not yet been distributed, but the CVE is confirmed.turansecurity · statementA serious vulnerability rated 9.8 was discovered in WordPress (CVE-2026-63030).turansecurity · investigationTwo critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and they create a risk of remote malicious code execution on the server and unauthorized access to data.Turan Security Xavfsizlik Byulleteni · allegationActive exploitation of the vulnerability has been confirmed and it is listed in CISA KEV.Turan Security xavfsizlik byulleteni · statementThe vulnerability can cause memory corruption, service disruption, and in some cases remote execution of malicious code via specially crafted compressed data.Turan Security Xavfsizlik Byulleteni · statement