ClickHouse server crash (SIGSEGV) after Brotli request - CVE-2026-111497

Suraj A@cytech

•updated yesterday•3•0•14

Detects segmentation fault or crash log messages related to ClickHouse server processes in syslog, which can indicate service disruption or exploitation attempts such as the Brotli request crash (HTTP2Shell/CVE-2026-111497).