{"version":1,"type":"story","url":"https://digestai.news/story/openai-s-gpt-5-6-sol-helps-discover-critical-php-vulnerabilities","json":"https://digestai.news/story/openai-s-gpt-5-6-sol-helps-discover-critical-php-vulnerabilities.json","markdown":"https://digestai.news/story/openai-s-gpt-5-6-sol-helps-discover-critical-php-vulnerabilities.md","slug":"openai-s-gpt-5-6-sol-helps-discover-critical-php-vulnerabilities","headline":"Openai's GPT-5.6 Sol helps discover Critical PHP vulnerabilities","summary":"On October 21 the PHP development team released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, fixing two critical flaws identified as CVE‑2026‑109618 and CVE‑2026‑109619. Both receive a CVSS v4.0 severity score of 9.2 and could allow unauthenticated remote code execution, especially when PHP runs via the mod_php method. The official announcement says the security firm Calif used OpenAI’s GPT‑5.6 Sol, under the “Patch the Planet” open‑source support initiative, to locate the bugs, while the firm Wiz independently reported them as well.\n\nThe PHP team notes that temporary configuration mitigations exist but only a full version upgrade fully resolves the issue. Support for PHP 8.2 ends on December 31 2026, so sites still on that branch must upgrade promptly. OpenAI has warned that similar AI‑driven discoveries are likely to increase in the coming months. The article also briefly covers OpenAI’s improved programming performance on low‑resource languages, Recursive’s free “Flint” laptop coding model, and Anthropic’s Claude Duet agent preview, illustrating a broader trend of AI tools moving from code generation to security and migration tasks.","keyPoints":["Two critical PHP flaws (CVE‑2026‑109618, CVE‑2026‑109619) with CVSS 9.2 were fixed in PHP 8.5.12, 8.4.27, 8.3.36, 8.2.35.","OpenAI's GPT‑5.6 Sol, used by security firm Calif, identified the vulnerabilities under the \"Patch the Planet\" initiative.","PHP 8.2 support ends Dec 31 2026; updating is the only complete mitigation."],"whyItMatters":"The case shows AI models can uncover severe software bugs, accelerating patch cycles for widely used web infrastructure and highlighting new security roles for generative AI.","category":{"slug":"research","name":"Research","url":"https://digestai.news/category/research"},"entities":{"companies":["OpenAI","PHP","Calif","Wiz","Recursive","Anthropic"],"models":["GPT-5.6 Sol","GPT-6 Astra","GPT-6.1 Sol","Flint","Claude Duet","Opus 5.5"],"people":[]},"firstPublishedAt":"2026-10-21T15:35:00Z","updatedAt":"2026-10-21T15:35:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"note.com","title":"Critical PHP hole discovered by GPT-5.6 Sol. Exporting my site's PHP version today","url":"https://note.com/ai_tofumaru/n/n8046e6bb8faa?hl=en","publishedAt":"2026-10-21T15:35:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":{"title":"OpenAI Sol Unveils Critical Web Vulnerabilities","url":"https://digestai.news/thread/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites","storyCount":4},"cite":{"text":"Digest AI, \"Openai's GPT-5.6 Sol helps discover Critical PHP vulnerabilities\", 21 October 2026, https://digestai.news/story/openai-s-gpt-5-6-sol-helps-discover-critical-php-vulnerabilities","publisher":"Digest AI","title":"Openai's GPT-5.6 Sol helps discover Critical PHP vulnerabilities","datePublished":"2026-10-21T15:35:00Z","url":"https://digestai.news/story/openai-s-gpt-5-6-sol-helps-discover-critical-php-vulnerabilities"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}