OpenAIEventCybersecurityOctober 21, 2026

OpenAI's Patch the Planet finds critical PHP flaws in 70% of the web

Read original source →openai.com

Researchers using GPT-5.6 Sol found PHP2Shell (CVE-2026-109618 and CVE-2026-109619), memory-corruption bugs in PHP's out-of-memory and fatal-error handling that let attackers run code on servers. The bug sat in PHP for 14 years; fixes shipped a day after details leaked, ahead of an October 22 target.

People · Greg Brockman, Matthew Prince

How this story unfolded

2 days · 8 reports · 4 community posts · 12 of 15 shown

  1. Oct 21
  2. Oct 22
  3. Oct 23

More stories today

Open the live feed