HTTP2Shell: the Brotli decoder in your HTTP stack is critical, and your scanner won't flag it

On Wednesday, October 21, Node.js disclosed CVE-2026-111497: a Node process that decompresses...