⚠️
SECURITY ALERT — This server has been compromised.
Attacker gained root shell via CVE-2026-111497 (Brotli 1.2.0 heap OOB write). No login. No credentials. One malformed HTTP POST.
CVE-2026-111497
CVSS 9.2 CRIT
💀

SITE DEFACED

This server was compromised through a memory corruption bug in libbrotli 1.2.0 — a third-party dependency, not application code.

Brotli 1.2.0 · decode.c:2463 · OOB write · heap corruption · RCE
① Recon    HTTP HEAD → X-Brotli-Decoder: 1.2.0 exposed version
② OOB     POST /decompress → 5680-byte stash overwrites decoder state
③ Shell    Corrupted state → shell endpoint activated on :8181
④ Expand   SSH key · cron beacon · env exfil · this page