From Dev.to
CISA confirms active exploitation of critical Brotli flaw Node2Shell
CISA has confirmed that attackers are exploiting a critical vulnerability in Brotli, tracked as CVE-2026-111497. It circulates under several names, including Node2Shell, Broccoli2Shell and HTTP2Shell....