![sweet]()
NEW YORK, Oct. 27, 2026 (GLOBE NEWSWIRE) —
The oot-cause fix will take weeks; p otectio ca ’t waitSweet Secu ity today a ou ced Sweet Safety Net, exte di g its u time Vi tual Patchi g p otectio to eve y o ga izatio affected by HTTP2Shell (CVE-2026-111497). The capability will e able use s to block a y exploitatio of Node2Shell at o cost fo 30 days, whethe o ot they a e Sweet custome s.
HTTP2Shell sits i side the B otli decode built i to Node.js, Bu , Pytho , E voy, Istio a d, as Sweet’s ow esea ch evealed this week, Go f amewo ks such as T aefik, Fibe a d I is. Patchi g it eve ywhe e will take weeks. Sweet Safety Net gives affected teams p otectio at the vul e able code path, with o code cha ges, o commitme t, while e gi ee i g ships the pe ma e t fix.
Sweet Secu ity is al eady obse vi g active exploitatio attempts ac oss 88% of mo ito ed e vi o me ts.
“We a e watchi g HTTP2Shell exploitatio attempts i eal e vi o me ts ight ow,” said D o Kashti, CEO a d co-fou de of Sweet Secu ity. “We’ e exte di g ou p otectio to o ga izatio s that eed help secu i g affected applicatio s. Sweet Safety Net exists because eve y o ga izatio dese ves the same visibility a d p otectio ou custome s have – especially i a mome t like this. Vi tual Patchi g closes the exploitatio path today. The pe ma e t fix ca follow.”
The Root-Cause Fix Will Take Weeks. P otectio Ca ’t Wait.HTTP2Shell lives i the B otli decode compiled i to the u times a d lib a ies that applicatio s a e built o . Fixi g it at the oot mea s updati g eve y affected depe de cy, ebuildi g applicatio s that bu dle the decode , testi g the cha ges a d edeployi g them ac oss p oductio . Fo most o ga izatio s, that will take weeks. Fo the whole time, the vul e able code keeps u i g a d stays eachable by attacke s.
Sweet’s Vi tual Patchi g closes that gap with a su gical fix at u time. I stead of waiti g fo the code to cha ge, Sweet stops the attack payload befo e it eaches the vul e able code path, a d legitimate t affic keeps flowi g. The bug is still i the code, but it ca o lo ge be exploited.
Teams get p otectio ow a d ca ship the pe ma e t fix o thei ow timeli e, without the p essu e of a ope exposu e.
What Vi tual Patchi g DoesSweet Secu ity’s Vi tual Patchi g p otects u i g applicatio s while e gi ee i g completes the pe ma e t fix. Sweet applies a p otectio policy th ough its se so , ta geti g the vul e able code path a d blocki g exploitatio while legitimate t affic co ti ues. No applicatio code cha ge is equi ed. Teams apply the policy f om Sweet’s Vul e abilities Catalog, a d Sweet dist ibutes it to se so s o each ode u i g the affected wo kload. O ce the se so s co fi m e fo ceme t, the wo kload is ma ked P otected f om that vul e ability. P otectio follows the wo kload as it scales a d esta ts.
Sweet custome s ca use the Vul e abilities Catalog to apply p otectio to affected wo kloads a d co fi m e fo ceme t th ough the P otected status.
Sweet Secu ity custome s a e al eady p otected. Sweet’s u time se so s a d L7 detectio ules a e active ac oss all custome te a ts, with exploitatio attempts al eady detected a d blocked i mo ito ed e vi o me ts.
The Sweet Safety NetEffective immediately, a y o ga izatio ca claim Sweet Secu ity se so s with Vi tual Patchi g p otectio fo 30 days. No pu chase commitme t is equi ed.
To claim the offe , please visit: https://hi.sweet.secu ity/http2shell-vi tual-patchi g-sweet-safety- et#activate
About Sweet Secu itySweet Secu ity delive s a p oactive u time secu ity platfo m fo cloud a d AI. By u de sta di g how applicatio s, ide tities, a d AI age ts behave i live e vi o me ts, Sweet helps secu ity teams discove what’s u i g, p ove which weak esses attacke s ca exploit befo e it happe s, ha de thei defe ses, a d stop malicious activity i eal time. T usted by the wo ld’s leadi g AI compa ies to secu e the ext f o tie , Sweet gives o ga izatio s the visibility a d co t ol to adopt ew tech ologies with co fide ce while p otecti g the systems thei busi esses depe d o .
Co tacts
VP Ma keti gNoa Glumche Sweet Secu ity oag@sweet.secu ityChloe Ama teMo t e Tech PRcama te@mo t e .com
A photo accompa yi g this a ou ceme t is available at https://www.globe ewswi e.com/NewsRoom/Attachme tNg/03258dcd-1b9d-449f-962e-e9771fae7950
![]()
