PHP discloses PHP2Shell vulnerability affecting up to 70% of websites
The PHP development team announced a critical memory‑management flaw called PHP2Shell that could affect up to 70% of websites, according to the Wall Street Journal. The bug was uncovered in August with the help of the GPT‑5.6 Sol model, marking one of the most severe online security issues identified by AI tools.
Key points
- PHP announced a memory‑management flaw called PHP2Shell that could affect up to 70% of websites.
- The vulnerability was identified in August using the GPT‑5.6 Sol model.
- Experts are urging rapid patches to prevent AI‑assisted exploitation.
Cybersecurity experts are now racing to develop and deploy patches before malicious actors exploit the flaw using AI. The report highlights both the power of generative models in finding hidden bugs and the emerging risk that the same technology could be turned against vulnerable systems.
PHP has urged site owners to monitor updates and apply fixes as soon as they become available, while the broader community watches how AI‑assisted discovery may reshape vulnerability research and defense strategies.
Model page: GPT-5.6 Sol →
PHP2Shell: AI uncovers critical RCE in PHP
wiz.io · 21 October 2026
Loading the full article…
This text was published by wiz.io and written by https://www.wiz.io/authors/sagi. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
Coverage and discussion
2sourcesThe headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Research
All →- What Is Distributed AI Training? Data, Tensor, Pipeline, and Expert Parallelism · 1 src
- Claude designs protein minibinders against scorpion neurotoxins · 3 src
- Mass General Brigham's AI predicts cancer survival from a selfie, study suggests · 2 src
- Demis Hassabis says he expects AGI within two to three years, down from his three-to-five-year prediction earlier in 2026, and discusses AI's science potential · 1 src
- Interactive site visualizes Artificial Analysis scores versus model size · 1 src
Comments
via GitHub Discussions