Researchers at OpenAI and Wiz used frontier AI models to help uncover two critical PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619. The flaws enable unauthenticated remote code execution across affected PHP systems. PHP released security patches on October 21, 2026.
AI Models Help Discover Two Critical PHP Vulnerabilities Affecting 70% of the Web