.NET, Node.js, PowerShell, Python Affected by Critical Brotli RCE Flaw
Microsoft has issued emergency out-of-band patches for a critical remote code execution (RCE) vulnerability in the Brotli compression library, affecting multiple .NET versions.
AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works
- Reported1 of 6 key facts linked
- Not measuredno reporting-volume measure is served for situations
- Not assessedno severity is rated for situations
- 2 publishers2 reports
: Stable (the model's assessment, not a measurement)
- Why now
- Newest report Oct 26: Microsoft issues emergency .NET patches for critical Brotli flaw (BleepingComputer).from the newest member report, published 26 Oct 15:38 UTC
- Why it matters
- The widespread impact across critical software ecosystems and the potential for unauthenticated RCE elevate the risk of significant exploitation and operational disruption.
- Affected
- United States (lead)countries named in the evidence; the lead is the country it is filed under, not an event location
- Next catalyst
- No scheduled catalyst known.Mosaic holds a schedule only for economic-calendar releases; 3 indicators to watch below
Save keeps it in Monitor › Saved, without alerts. Watch opens Monitor with “Brotli Vulnerability Patching” as the subject.
Known and unknown
Known
- ReportedMicrosoft released emergency out-of-band security updates for .NET to address a critical RCE vulnerability in the Brotli compression library.
Not established
- The flaw affects multiple .NET versions and is tracked as Broccoli2Shell/Node2Shell/HTTP2Shell.
- The vulnerability could allow unauthenticated attackers to execute code on vulnerable servers.
- An out-of-bounds write vulnerability in Google's Brotli decoder affects Node.js, .NET, PowerShell, and Python packages.
- Vendors are actively patching the Brotli decoder flaw across multiple ecosystems.
- The precise severity and exploitation status of the broader Brotli decoder flaw across all affected platforms remain unclear.
stated, not yet supported by linked evidence
Indicators to watch
- →Further vendor advisories and patches for other affected Brotli implementations
- →Reports of active exploitation attempts targeting the Brotli vulnerability
- →Publicly available proof-of-concept (PoC) exploits
what would change the read; not a schedule
Evidence
Central claim Microsoft issues emergency .NET patches for critical Brotli flaw
Timeline
Connected
named in this situation's reports; not a claim that one causes anotherOther situations in United States
Actors
Places
- United States Situations Map Monitor
Anomalies
Assessment
Read the full assessment
Microsoft has issued emergency out-of-band patches for a critical remote code execution (RCE) vulnerability in the Brotli compression library, affecting multiple .NET versions. This flaw, tracked as Broccoli2Shell/Node2Shell/HTTP2Shell, is confirmed to allow unauthenticated attackers to execute code on vulnerable servers. The vulnerability is also confirmed to impact Node.js, PowerShell, and Python ecosystems, indicating a broad supply-chain risk.
AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works
Topics microsoft · dotnet · brotli · vulnerability · patch · remote-code-execution · code-execution · supply-chain · patching · nodejs
Technical details
- Impact score
- 5.0 / 10 · a priority score, not confidence
- Model confidence
- Medium: evidence reported (1 of 6 key facts linked to evidence; the model marked a key fact as unclear); 2 distinct outlets
- Coverage focus
- 50% in primary evidence group
- Coherence
- 0.73
- Review state
- published
- Refreshed
- Updated Oct 26, synthesized Oct 26. Not evidence time.
- Cluster type
- story
- Member signals
- 2
- Situation id
- 9e85a881-1c62-498a-b2f9-a4e2edd4b380
Discussion
…Sign in to add a note, contribute a source, or challenge the assessment.