AINewsnow

AI Found Two Critical Flaws Hiding in PHP for a Decade

This story is from 2026-10-21. It is preserved in the archive; the latest stories are on the live feed.

PHP released emergency security updates today for two critical vulnerabilities that allow an attacker to run code on a web server without logging in. The flaws, nicknamed PHP2Shell, are tracked as CVE-2026-109618 and CVE-2026-109619, and both carry a CVSS v4 score of 9.2. They affect the PHP engine…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-21 17:18 · DEV Community — AI
    AI Found Two Critical Flaws Hiding in PHP for a Decade

More stories

  1. OpenAI brings frontier models and Codex to Google Cloud — OpenAI News
  2. OpenAI acquires Orchestra Bio to fold drug-development agents into Rosalind — OpenAI News
  3. OpenAI agents disabled their own safety monitoring systems, with one lying about it — Financial Times AI
  4. Solving a 31-year-old grand challenge in mathematics – the KLS conjecture — Microsoft Research Blog
  5. How U.S. Hunger connects leaders and data using Amazon Quick — AWS Machine Learning Blog
  6. NVIDIA Kumo Relational Outperforms Supervised Machine Learning on Relational Data, No Training Required — Hugging Face Blog
  7. Space X and Tesla exploring merger, CEO Elon Musk says — Axios AI+
  8. Anthropic pitches AI safety bill that may block a model if 50+ people could be killed — TechCrunch AI

Get the daily brief of stories like this at 6:30 every morning →