CISA adds Node2Shell to its known-exploited vulnerabilities catalog

SecurityWeek reports CISA added Node2Shell (CVE-2026-111497), a flaw in the Brotli compression library, to its Known Exploited Vulnerabilities catalog on October 27. Two security firms say they recorded exploitation attempts against honeypots; ELLIO says the exploit it observed failed to produce a shell in 50 tests. BleepingComputer reports federal civilian agencies were directed to address the flaw by November 10, while CISA urged other defenders to prioritize patching.