PHP powers roughly 70% of the world’s websites , according to Wiz Research , so a flaw in its core engine affects much more than any single application. On Wednesday, researchers disclosed two critical vulnerabilities discovered with help from frontier AI models. OpenAI also proposed a new framework for handling the growing number of security flaws AI is helping uncover. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619 and collectively called PHP2Shell, score 9.2 on the CVSS v4.0 severity scale. Researchers at Calif.io found one using OpenAI’s GPT-5.6 Sol, while Wiz independently...

Source: The New Stack