{"version":1,"type":"story","url":"https://digestai.news/story/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites","json":"https://digestai.news/story/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites.json","markdown":"https://digestai.news/story/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites.md","slug":"php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites","headline":"PHP discloses PHP2Shell vulnerability affecting up to 70% of websites","summary":"The PHP development team announced a critical memory‑management flaw called PHP2Shell that could affect up to 70% of websites, according to the Wall Street Journal. The bug was uncovered in August with the help of the GPT‑5.6 Sol model, marking one of the most severe online security issues identified by AI tools.\n\nCybersecurity experts are now racing to develop and deploy patches before malicious actors exploit the flaw using AI. The report highlights both the power of generative models in finding hidden bugs and the emerging risk that the same technology could be turned against vulnerable systems.\n\nPHP has urged site owners to monitor updates and apply fixes as soon as they become available, while the broader community watches how AI‑assisted discovery may reshape vulnerability research and defense strategies.","keyPoints":["PHP announced a memory‑management flaw called PHP2Shell that could affect up to 70% of websites.","The vulnerability was identified in August using the GPT‑5.6 Sol model.","Experts are urging rapid patches to prevent AI‑assisted exploitation."],"whyItMatters":"A flaw that may compromise the majority of web sites poses a massive security risk, and its AI‑driven discovery underscores both the promise and danger of using generative models for vulnerability research.","category":{"slug":"research","name":"Research","url":"https://digestai.news/category/research"},"entities":{"companies":["PHP","Wall Street Journal"],"models":["GPT-5.6 Sol"],"people":["Robert McMillan"]},"firstPublishedAt":"2026-10-21T14:06:37Z","updatedAt":"2026-10-21T14:06:37Z","sourceCount":3,"hasPrimarySource":false,"sources":[{"outlet":"wsj.com","title":"PHP discloses a critical memory-management vulnerability, dubbed \"PHP2Shell\", that affects up to 70% of websites, discovered using GPT-5.6 Sol in August","url":"https://wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea?st=tBLRBh&reflink=desktopwebshare_permalink","publishedAt":"2026-10-21T14:06:37Z","type":"press","primary":false,"lead":true},{"outlet":"wiz.io","title":"PHP2Shell: AI uncovers critical RCE in PHP","url":"https://wiz.io/blog/php2shell-php-rce","publishedAt":"2026-10-21T13:43:19Z","type":"press","primary":false,"lead":false},{"outlet":"theverge.com","title":"GPT‐5.6 Sol was used to identify critical PHP flaw.","url":"https://theverge.com/tech/1015481/gpt-5-6-sol-was-used-to-identify-critical-php-flaw","publishedAt":"2026-10-21T08:45:00Z","type":"press","primary":false,"lead":false}],"sourceNotes":null,"discussions":[{"site":"Hacker News","url":"https://news.ycombinator.com/item?id=50180836","points":98}],"thread":null,"cite":{"text":"Digest AI, \"PHP discloses PHP2Shell vulnerability affecting up to 70% of websites\", 21 October 2026, https://digestai.news/story/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites","publisher":"Digest AI","title":"PHP discloses PHP2Shell vulnerability affecting up to 70% of websites","datePublished":"2026-10-21T14:06:37Z","url":"https://digestai.news/story/php-discloses-php2shell-vulnerability-affecting-up-to-70-of-websites"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}