ET ACTIVEX Inbound HTTP Brotli Compressed Request

7.0.35.0SID: 2072656Rev: 1Disabled15 views
Sourceet/open
Fileemerging-activex.rules
CreatedNovember 9, 2026
UpdatedNovember 9, 2026
Classificationweb-application-activity
alert http $EXTERNAL_NET any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET ACTIVEX Inbound HTTP Brotli Compressed Request"; reference:url,www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/; reference:cve,2026-111497; classtype:web-application-activity; sid:2072656; rev:1; metadata:attack_target Web_Server, created_at 2026_11_09, deployment Perimeter, performance_impact Moderate, confidence High, signature_severity Unknown, updated_at 2026_11_09;)
Detection details are hidden.

References

urlwww.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/
cve2026-111497

Metadata

attack targetWeb_Server
created at2026_11_09
deploymentPerimeter
performance impactModerate
confidenceHigh
signature severityUnknown
updated at2026_11_09

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!