Node2Shell / HTTP2Shell (CVE-2026-111497): Brotli Library RCE
On October 21, 2026, Node.js fixed CVE-2026-111497, a critical vulnerability now known as Node2Shell and, since October 24,…
Tag
WAF Protection
6 articles
NGINX Under Active Attack: CVE-2026-42945 and CVE-2026-9256 Put Your Infrastructure at Risk
Two critical NGINX heap buffer overflows are under active exploitation. Learn what's at risk, affected versions, and fixes…
Why Your WAAP & WAF Must Support Custom Ports, Not Just 80 and 443
Modern apps use more than 80 and 443. Learn why WAF support for custom ports matters, risks of…
Fundamentals of Origin Server Protection
Learn the essentials of origin server protection: Discover why protecting your servers is crucial and explore effective strategies…
WAF Bypass Explained — Risks, Examples, and Prevention
WAF bypass occurs when attackers evade or exploit vulnerabilities in a Web Application Firewall, reaching the origin server…
Preventing WAF Bypass: How AppTrana Protects Origin Servers with Resilient Architecture
Discover how AppTrana WAAP safeguards origin servers from BreakingWAF, a vulnerability exposing 40% of Fortune 1000 firms by…