OpenAI’s GPT-5.6 Sol Helps Find Two Critical Flaws in PHP

OpenAI’s GPT-5.6 Sol helped identify two critical flaws in PHP, prompting emergency patches for software used across much of the web, including services relied on by crypto businesses. The vulnerabilities, grouped under the name PHP2Shell, are unauthenticated remote code execution flaws in PHP’s core engine. They affect internet-facing deployments such as PHP-FPM and mod_php; mod_php is the higher-risk configuration. The flaws carry identifiers CVE-2026-109618 and CVE-2026-109619. Wiz independently identified and disclosed the two vulnerabilities. PHP maintainers released fixes in versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35.

Source: TokenPost