A new vulnerability, CVE-2026-111497, has been identified in the Brotli decoder. The issue, which has evolved from Node2Shell to HTTP2Shell, impacts multiple platforms including Node.js. Microsoft has released urgent fixes for the .NET Brotli flaw, and Cloudflare has issued immediate security measures. The vulnerability also affects multiple widely used applications, highlighting widespread implications across numerous applications.