Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma...
by rererereferred on Saturday October 24, 2026 @10:45AM
(#50221764)
Just call it CVE-2026-111497. More accurate and much easier to remember and to talk about with your boss.
[ Parent
| on HN ]
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma...
by N19PEDL2 on Saturday October 24, 2026 @11:16AM
(#50222107)
Or EUVD-2026-108169.
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma...
by kevincox on Saturday October 24, 2026 @06:50PM
(#50226227)
I can maybe remember CVE-2026. But there is no way I can remember 6 random digits.
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma...
by ygjb on Saturday October 24, 2026 @07:58PM
(#50226748)
Yeah, because the six number chunk is near the limit of recall. Don't remember CVE-2026 since the year and CVE can be reconstructed from time memory. You know it came up this year. Remember that vuln 111-497 (as two chunks) came out this year, and remembering two short chunks is easier.
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma...
by latexr on Sunday October 25, 2026 @10:26AM
(#50231939)
I don’t know why you’d want to remember the number, but this one seems easy if you know some memory techniques.
> Remember that vuln 111-497 (as two chunks)
Good first step. Remember it’s two sets of three numbers. The first set is all ones, meaning the first three numbers are 1, then the fourth number is 4, then you add five for the next one (9), then you have to remember to subtract two (7)¹.
May sound silly, but I bet some of you have already memorised it from that alone. Being a slightly convoluted by still logical set-by-step helps with recollection.
¹ Lot of different ways to go about that, like remembering that the first set was three of one so “two was left out”.
Re:Node2Shell evolves to HTTP2Shell, blast radius affects ma...
by vanschelven on Sunday October 25, 2026 @08:31AM
(#50230867)
Fun fact: not even Google can remember that number on the first try, apparently: