OpenAIEventCybersecurityOctober 21, 2026

OpenAI's Patch the Planet finds critical PHP flaws in code behind 70% of web

Read original source →openai.com

Researchers using GPT-5.6 Sol found PHP2Shell (CVE-2026-109618 and CVE-2026-109619), memory-corruption bugs in PHP's out-of-memory and fatal-error handling; the flaw sat in PHP for 14 years. OpenAI led a two-month coalition to fix it, but details leaked early and PHP shipped patches a day ahead of the planned October 22 release.

People · Greg Brockman, Matthew Prince

How this story unfolded

3 days · 7 reports · 3 community posts · 10 of 13 shown

  1. Oct 21
  2. Oct 22
  3. Oct 23
  4. Oct 24

More stories today

Open the live feed