Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected.

Timeline

1. 26 Oct, 09:10 UTCFirst appeared on Google Trends
2. 26 Oct, 09:10 UTCPicked up on News

Top sources

• cve-2026-111497Google Trends
• Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used SoftwareThe Hacker News
• Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerabilitywiz.io