'Node2Shell' Vulnerability (CVE-2026-111497) in Active Exploitation

A critical buffer overflow vulnerability, widely known as 'Node2Shell' (CVE-2026-111497), is under active exploitation. The flaw exists in the Brotli decoder in multiple Google Brotli versions and products relying on its implementations. Successful exploitation could lead to memory disclosure, denial of service, or remote code execution. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added this vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on October 27, 2026.