Microsoft releases emergency .NET patches for critical Brotli flaw

Microsoft released emergency .NET security updates to address the critical vulnerability CVE-2026-111497. Also known as Broccoli2Shell, Node2Shell, and HTTP2Shell, the vulnerability affects the Brotli decoder. The source reports no malicious exploitation in the wild, but proof-of-concept exploits have been published on GitHub.