PHP Foundation reveals Claude scanned PHP code, frontiers models helped find two critical RCE bugs
Hesamation · x · 2026-10-22
The PHP Foundation shipped PHP 8.5.12/8.4.27/8.3.36/8.2.35 fixing two critical unauthenticated RCE vulnerabilities — CVE-2026-109618 (OOM corruption triggering memory corruption on Apache modphp with default settings, plus PHP-FPM paths) and CVE-2026-109619 (stale global state leading to use-after-free). It also disclosed that Anthropic's Claude (Mythos) scanned PHP earlier this year, with access to OpenAI's Daybreak Red for exploit validation, sparking debate about keeping frontier cyber models in few hands.
More from Models
- LightOn open-sources SlideOn: SAE-based sparse retrieval beats its dense teacher at 174M params — tomaarsen · 2026-10-22
- LightOn's SlideOn sweeps MTEB, taking top two spots for under-500M retrieval models — tomaarsen · 2026-10-22
- NVIDIA unveils Vera Rubin full-stack agent hardware, claims post-trained Nemotron beats frontier models — mervenoyann · 2026-10-22
- Carbon checkpoint on LMArena updated, Gemini web and app change in sync — lyraxana · 2026-10-22
- KRAFTON's Raon-1-mini-preview Trends on Hugging Face — KRAFTON · 2026-10-22
- Gemini 4 Carbon Checkpoint Wows at 3D Generation: Opus 5.5 Level? — WorldofAI · 2026-10-22