NCSC urges immediate patching as AI-discovered PHP flaw details leak
Details of two AI-discovered critical PHP vulnerabilities (CVE-2026-109618/109619) enabling unauthenticated remote code execution have leaked, prompting the UK's NCSC to urge immediate patching of all PHP versions.
2026-10-22 ~ 2026-10-22 · 2 related posts
- Episode 1: PHP Rushes Emergency Patches for Two Critical Unauthenticated RCE Flaws Found with OpenAI's Help(2026-10-21, 65 posts)
- Episode 2: Researchers Predict LLM Audits Will Uncover More PHP Vulnerabilities(2026-10-21, 3 posts)
- Episode 3: PHP RCE proof-of-concept confirmed working, but not one-click(2026-10-21, 2 posts)
- Episode 4: POC Released for Critical Pre-Auth RCE in PHP session.upload_progress(2026-10-21, 2 posts)
- Episode 5: PHP 8.5.12 Patch Incomplete: php2shell Double-Free Still Exploitable(2026-10-22, 2 posts)
- Episode 6: NSA Issues Rare Urgent Directive: Patch Critical PHP Flaws or Go Offline(2026-10-22, 2 posts)
- Episode 7: NCSC urges immediate patching as AI-discovered PHP flaw details leak(2026-10-22, 2 posts)
- AI-discovered critical PHP vulnerabilities leaked, UK NCSC urges immediate patching — LuizaJarovsky · 2026-10-22
- NCSC advisory details the two PHP flaws enabling unauthenticated remote code execution — LuizaJarovsky · 2026-10-22