# HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow

> **Open Intelligence Dossier** · First detected: 2026-10-26 17:20 UTC · Category: Business

## Executive Summary
5 news sources are covering this Business story right now — PULSE is tracking how fast it spreads.

## Intelligence Brief
"HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow" is generating significant coverage in the Business category, with 5 articles from 5 distinct sources tracked by PULSE so far.


Outlets currently covering the story include SecurityWeek, The Hacker News, Aikido Security and wiz.io. PULSE measures a story's velocity from how quickly new articles appear and how many independent newsrooms join the coverage.


This brief was generated by PULSE's extractive engine from coverage metadata only. The latest headlines from every source are listed below; the velocity chart shows how the story is developing in real time.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| SecurityWeek | Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages | [Source Link](https://news.google.com/rss/articles/CBMisAFBVV95cUxOOUl5N3FWaWptaldNNURiTEVUMTNDdnI2OVN6b2FUbnk3aGJjcTFIS2JaSnBxOTJkWG5mYjBPMEVCci1CYU9tMWs0ZDg5Mjl3cHhsaHpnd05OSy1lNkVqanNBbDJrbzFrWXZaYWM3UUQwZldrN3RhY0pjT0FyclZlcWNseVBSRWZJSS1Wb3RCa3hnTUZVMVF3ZlExblZFeF9zNjUtRE4wM1BQSTN3Vl8ta9IBtgFBVV95cUxQNlozb1ZiV21MWjFGRXY3eXBFWGVWQS14VFJhV0szZzhXNHN4UDRkWkZGczJMU1o1bW5KYkRmNDZFV1hOekU1bFRCakpGcnpBM1hCbGN1LXVnTldnTklTZVdyZmYyczNmRm51VFdJNWpNMkRkTXZGWDdyMHBMRlJoZlpJdkpUbHhGTXNtNFhsMmxXeEpROVN5NEVyQTBrTDVUSkl) |
| The Hacker News | Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software | [Source Link](https://news.google.com/rss/articles/CBMiggFBVV95cUxPeUIxaWl6NUx5bW5jZ1g0d1lTeHAxbGVBSEtjWjAySDFmU0pxMmRaSDhTVW14RmRnUEdkbUlHdExteEk4T0p6Q0ZZT3lHcEVua0hIY0t1Y3NTUkp6aEdocE4wb2dIWXNmN1p6eVMtc2NRZzQ4VzVRb1BHbVp6V0p2bVpB?oc=5) |
| Aikido Security | Node2Shell Brotli vuln (CVE-2026-111497) evolves to HTTP2Shell, as libraries and apps using HTTP are affected. | [Source Link](https://news.google.com/rss/articles/CBMikgFBVV95cUxQdmR2NGRGeDJ4eDJkUHFVdkpxWko3SWgzYXB4TFhWazFzU3U2S0ZzYkQ4WlVBLVhjWFJObU9kelQzNm5MdDRkRFBFV1BEZ29nUVloUVQ1ZDJHdjRGSDdOQkFzUXd2aTFkNHVmX29ndVZyMHFWX0FPRGlYMDJpcWZvUE82SzBES05RS1d2elR6RHZiZw?oc=5) |
| wiz.io | Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability | [Source Link](https://news.google.com/rss/articles/CBMiakFVX3lxTE05WEEtSGg3bUQ5dXJoNjJQSE55QlZueVUzQnJlbjVQMENOM2FzUFMxUnNHckVqMnVaSG9XNnNVYms0cnlzVFo4VC1ac1FXREVrUVVTZTNiMDVYaExiazh3MVM2WVNoZ1F6dXc?oc=5) |
| CyberSecurityNews | HTTP2Shell Vulnerability Extends Beyond HTTP, Affecting .NET, FFmpeg, ClickHouse, and Apache Arrow | [Source Link](https://news.google.com/rss/articles/CBMiZkFVX3lxTE9UclNhd3VMaHQ2Y1ZPeXdkWFg3QlhRWWx4U1pvaDVuVzZiVC1yNERUWG5iVm5EUWJMMExvd3Y2UnJZYXdXelAxQ3VRWmFfQ2VkQ0ZScWM3Si1nWXJWZDhjX3NUd1pxUdIBa0FVX3lxTE5xTnl0ZDFncEVEcUpxX0dFLXBPaTNhNE5URUNrY3ZGZUp5emlZOXhkYWRaVzBEVWZkczE0TnRNOENhTnhCaW9PMV8xVlR6NC16bDNwbWN5T2Z6eDJvVjJBM2Y2VUotYV9GV3Vr?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-10-26/http2shell-vulnerability-extends-beyond-http-affecting-net-ffmpeg-clickhouse*