Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection for Free
New York, NY, October 27th, 2026/CyberNewswire/--Sweet Security today announced Sweet Safety Net, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497). The capability will enable users to block any exploitation of Node2Shell at no cost for 30 days, whether or not they are Sweet customers.
HTTP2Shell sits inside the Brotli decoder built into Node.js, Bun, Python, Envoy, Istio and, as Sweet’s own research revealed this week, Go frameworks such as Traefik, Fiber and Iris. Patching it everywhere will take weeks. Sweet Safety Net gives affected teams protection at the vulnerable code path, with no code changes, no commitment, while engineering ships the permanent fix.
Sweet Security is already observing active exploitation attempts across 88% of monitored environments.
“We are watching HTTP2Shell exploitation attempts in real environments right now,” said Dror Kashti, CEO and co-founder of Sweet Security. “We’re extending our protection to organizations...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE
