Wiz used Gemini and GPT to exploit decade-old PHP bugs in a week, prompting emergency patches
Haunting_Ganache_850 · reddit · 2026-10-22
Wiz disclosed PHP2Shell (CVE-2026-109618/9), two critical PHP engine bugs enabling unauthenticated RCE and memory disclosure, dormant for over a decade. With Gemini and GPT assistance, researchers found the bugs and built working exploits in about a week — work that once took elite teams months. Four large organizations reportedly took PHP sites offline for emergency patching. The broader point: AI is collapsing the assumption that some vulnerabilities are too hard to find or exploit, putting decades of legacy code at risk.
Related event: OpenAI Model Helps Uncover Critical PHP Flaws Affecting ~70% of Websites(46 posts)→
More from Models
- You.com launches Flint, a local coding model built by its Eureka Machine in under 4 months — omarsar0 · 2026-10-22
- Recursive SI launches Flint: open-weights local coding model at 125+ tokens/sec on MacBook Pro — JafarNajafov · 2026-10-22
- Pichai on Gemini 4 Argon: even Google can't get enough AI compute — sundarpichai · 2026-10-22
- Flint founder recalls OpenAI Codex debate: local interactive coding vs cloud agents — josh_tobin_ · 2026-10-22
- Recursive launches Flint: an open 40B MoE model built for local agentic coding — josh_tobin_ · 2026-10-22
- Recursive launches Flint: 40B MoE local coding model built in 4 months by its automated research system — RichardSocher · 2026-10-22