The author of the article pointed out a vulnerability labeled Brocolli2Shell, which he described as potentially more insidious than PHP2Shell. He stated that a flaw CVE-2026-111497 with a CVSS rating of 9.2 was discovered in the Brotli compression library, which an attacker could exploit for remote code execution if the library was used for decompressing data. (translated)