Forkast News

AI-Assisted Research Uncovers Critical PHP2Shell RCE Vulnerabilities

Two critical remote code execution flaws in the PHP language runtime, found by frontier AI models after a decade of manual ...

Critical security flaw puts most websites at risk as NSA issues warning

The vulnerability could allow attackers to take control of or disrupt websites and access sensitive user information.
Dark Reading

'PHP2Shell' Bugs Signal Red Alert for Security Industry

Critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 sparked emergency patching efforts after a disclosure leak.

Critical PHP Flaws Threaten Millions of Websites in New AI Security Test

Some organizations have temporarily taken websites and online services offline rather than leave potentially vulnerable ...
Tweakers

Wat we nu weten over PHP2Shell, de twee kwetsbaarheden in scriptingtaal PHP

Het internet staat op scherp door twee kritieke kwetsbaarheden in PHP. Die scriptingtaal draait op bijna 70 procent van de ...

PHP vulnerability 2026 explained: What happened with 'PHP2Shell', how it affects millions of sites, patches and what precautions you must take

Two critical remote code execution (RCE) flaws dubbed "PHP2Shell" have hit the core PHP programming language, triggering ...
The Next Web

PHP rushes out emergency patches for two critical bugs AI found first

OpenAI calls PHP2Shell ‘one of the most impactful security issues in recent memory’, and says frontier AI found it before attackers did.
dexpose.io

PHP2Shell: How Security Teams Should Assess and Contain the Reported PHP RCEs

The configured form-field name is normally PHP_SESSION_UPLOAD_PROGRESS. When the relevant multipart request conditions are met, the parser may invoke PHP’s upload-progress handling. The PHP manual ...
SecurityWeek

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

PHP2Shell refers to two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that could lead to unauthenticated ...