Unverified50% confidenceFactExact time
HTTP2Shell chains together HTTP/2 frame handling and Brotli decompression, amplifying the impact of a single-point defect.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/24/2026
First Seen
Valid until: 1/22/2027
Sources
Related Entities
Related Claims
UnverifiedIntercepting and rate-limiting anomalous HTTP/2 frames and oversized headers at the edge layer can reduce the risk of http2shell-type attacks.74% similarUnverifiedPHP2Shell is a publicly disclosed exploit chain that can chain multiple flaws in PHP applications into a complete remote code execution (RCE) path.65% similarUnverifiedSecurity research firm Aikido disclosed the HTTP2Shell vulnerability, tracked as CVE-2026-111497, which is related to the Brotli decompression stage and could allow attackers to achieve remote code execution.65% similarUnverifiedPHP2Shell is described as a vulnerability affecting the software behind about 70% of websites.63% similarUnverifiedRedPen enforces network isolation at the code level: the HTTP client throws an exception when the base URL is not loopback, with test coverage; uploaded files are parsed from bytes and never written to disk; scripts/offline_proof.sh samples process sockets and verifies they are all loopback.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1094265API
curl https://kongchang.com/api/v1/knowledge/claims/1094265MCP
get_claim(id=1094265)