HTTP2Shell

Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. Tracked as CVE-2026-111497, this critical-severity flaw stems from an out-of-bounds write in the Brotli decoder, which expands data compressed using Google’s widely used Brotli lossless compression algorithm. HTTP2Shell impacts HTTP clients and servers, as well […]