OpenAI’s Codex Security helps uncover two critical PHP flaws before attackers do
Photo: Crypto Briefing
OpenAI, Calif and Wiz disclosed two remote code execution bugs in the PHP engine that could reach an estimated 70% of PHP-reliant websites The software quietly running a huge share of the internet just had a very close call. On October 21, 2026, OpenAI announced that its models helped uncover two critical vulnerabilities in the PHP engine. The discovery came alongside researchers from Calif and Wiz. A fix was ready before attackers could weaponize the bugs. The two flaws are tracked as CVE-2026-109618 and CVE-2026-109619 . Both carry a CVSS score of 9.2, placing them firmly in critical-risk territory.
Source: Crypto Briefing
