Researchers using OpenAI’s GPT-5.6 Sol and other AI models disclosed two PHP-engine memory-corruption vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that allow unauthenticated exploitation against major CMSs. The coordinated response across the PHP ecosystem shows AI can accelerate security audits, but developers should monitor patches and update their PHP installations promptly.
PHP core memory-corruption bugs (PHP2Shell) disclosed via AI-assisted researchlatent.space ↗