CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

The US cybersecurity agency CISA added the Brotli vulnerability CVE-2026-111497, also known as Node2Shell, HTTP2Shell, and Broccoli2Shell, to its Known Exploited Vulnerabilities catalog. Two security firms reported exploitation attempts recorded by their honeypots.