HTTP2Shell: A Critical Brotli Bug Hits Node.js, Python and .NET. Patch and Restart
Another “2Shell,” and this one hides inside a compression library. BleepingComputer reports that CVE-2026-111497 (also called HTTP2Shell, Node2Shell and Broccoli2Shell) is a buffer overflow in Google’s…