AI-discovered critical PHP vulnerabilities leaked, UK NCSC urges immediate patching
LuizaJarovsky · x · 2026-10-22
Two critical PHP vulnerabilities discovered by AI (CVE-2026-109618, CVE-2026-109619) have been leaked and can enable unauthenticated RCE; all PHP versions may be affected. The UK NCSC urges organizations to inventory PHP systems, update to fixed versions, apply mitigations or take systems offline, and check for compromise before upgrading.
Related event: NCSC urges immediate patching as AI-discovered PHP flaw details leak(2 posts)→
More from Safety
- Aaron Levie: AI agents will reshape cybersecurity, burning 100X more tokens than expected — brucemacv · 2026-10-22
- PHP Foundation says Chainguard broke security embargo ahead of emergency RCE patches — jedisct1 · 2026-10-22
- US states restrict retinal images as PII, threatening medical AI research — pearsekeane · 2026-10-22
- Generator Residency pays $8,500/month for a 3-month AI safety program in Berkeley — alexcovo_eth · 2026-10-22
- GoDaddy revokes 404,607 TLS certificates after mismatch flagged; 177k still pending — natesiggard · 2026-10-22
- Former FTC Chair Lina Khan calls today's AI exceptionalism "ludicrous" in AI governance talk — AINowInstitute · 2026-10-22