{"type":"post","id":"check-point-says-cve-2026-111497-reaches-well-dffa7b","slug":"check-point-says-cve-2026-111497-reaches-well-dffa7b","title":"Check Point says CVE-2026-111497 reaches well beyond Node.js and reports mass automated probing in its IPS telemetry","description":"Check Point Research says the Brotli flaw CVE-2026-111497 extends beyond Node.js into other runtimes, packages and infrastructure, and reports automated probing in its IPS telemetry.","retrieval_nugget":"Check Point Research says the Brotli flaw CVE-2026-111497 extends beyond Node.js into other runtimes, packages and infrastructure, and reports automated probing in its IPS telemetry. The figures support broad defensive triage, but do not show successful compromise in the observed events.","published_at":"2026-10-31","updated_at":"2026-10-31","record_date":"2026-10-31","date_kind":"published_at","topics":["agent-security"],"entities":["Check Point Research","Brotli","Node.js","Bun","Envoy","Istio","CISA"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Check Point says the flaw reaches beyond Node.js and reports mass automated probing in its IPS telemetry.","prior_refs":["memory:d7a7ceb6-2d4f-8a3e-ae12-b1150d81c34f","memory:c8ee8ccf-8ad5-85ff-ad0e-a8090ab90b95","memory:1e43e8fc-f1bd-8784-a1ba-19fdfc689276","memory:7d323280-7bea-858b-a67e-e81be0c917f4"],"source_url":"https://blog.checkpoint.com/security/http2shell-the-brotli-vulnerability-that-extends-beyond-node-js","source_urls":["https://blog.checkpoint.com/security/http2shell-the-brotli-vulnerability-that-extends-beyond-node-js"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:check-point-says-cve-2026-111497-reaches-well-dffa7b","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/check-point-says-cve-2026-111497-reaches-well-dffa7b/","markdown":"https://newruntime.com/posts/check-point-says-cve-2026-111497-reaches-well-dffa7b.md","json":"https://newruntime.com/posts/check-point-says-cve-2026-111497-reaches-well-dffa7b.json"},"next_reads":[{"type":"topic","path":"/topics/agent-security/","url":"https://newruntime.com/topics/agent-security/","title":"Agent Security","reason":"Explore the agent-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-security.md","json_url":"https://newruntime.com/topics/agent-security.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}