Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost
New York, NY, October 27th, 2026, CyberNewswire
The root-cause fix will take weeks; protection can’t wait
Sweet Security today announced Sweet Safety Net, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497). The capability will enable users to block any exploitation of Node2Shell at no cost for 30 days, whether or not they are Sweet customers.
CompareSecurity
HTTP2Shell sits inside the Brotli decoder built into Node.js, Bun, Python, Envoy, Istio and, as Sweet’s own research revealed this week, Go frameworks such as Traefik, Fiber and Iris. Patching it everywhere will take weeks. Sweet Safety Net gives affected teams protection at the vulnerable code path, with no code changes, no commitment, while engineering ships the permanent fix.
Discover more
Study Security
Read Tech News
Audit Security
Sweet Security is already observing active exploitation attempts across 88% of monitored environments.
CompareSecurity
“We are watching HTTP2Shell exploitation...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE