Node2Shell Remote Code Execution

CVE-2026-111497 is an out-of-bounds write vulnerability in Google’s Brotli decoder, a component used to decompress data encoded with the Brotli compression algorithm. Brotli is widely used in web communications and is incorporated into software libraries, runtimes, and HTTP clients, including Node.js.