{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/brotli-cve-2026-111497-nodejs-kev-runtime-decompression-review/",
    "fang": "live",
    "exported_at": "2026-10-28T21:44:01Z",
    "total": 30,
    "categories": 4
  },
  "iocs": {
    "IPv4": [
      "87.0.0.1"
    ],
    "Domains": [
      "broccoli2shell.com",
      "ellio.tech",
      "patchtheplanet.org",
      "www.aikido.dev",
      "www.openwall.com"
    ],
    "URLs": [
      "http://www.openwall.com/lists/oss-security/2026/10/23/25",
      "http://www.openwall.com/lists/oss-security/2026/10/24/6",
      "http://www.openwall.com/lists/oss-security/2026/10/26/12",
      "http://www.openwall.com/lists/oss-security/2026/10/26/13",
      "http://www.openwall.com/lists/oss-security/2026/10/26/16",
      "https://broccoli2shell.com",
      "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/",
      "https://patchtheplanet.org/brotli",
      "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497"
    ],
    "CVEs": [
      "CVE-2026-105481",
      "CVE-2026-105482",
      "CVE-2026-105483",
      "CVE-2026-106069",
      "CVE-2026-106070",
      "CVE-2026-106071",
      "CVE-2026-106072",
      "CVE-2026-106073",
      "CVE-2026-106074",
      "CVE-2026-111497",
      "CVE-2026-21715",
      "CVE-2026-48618",
      "CVE-2026-48930",
      "CVE-2026-48931",
      "CVE-2026-58043"
    ]
  }
}