PHP
JFrog Urges CISOs to Answer "Are We Exposed?" After Curl, PHP and LiteLLM Incidents
JFrog says recent vulnerabilities and a package compromise affecting Curl, PHP and LiteLLM show why security chiefs must be able to answer "Are we exposed?" quickly. In…
Palo Alto Networks warns of 22 million exposed PHP instances after two critical flaws
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have been published, and Palo Alto Networks says about 22 million instances are exposed. Both…
Top storyPHP2Shell: Wiz says AI helped find critical remote code flaws in PHP
Wiz Research says it found multiple critical vulnerabilities in core PHP that allow unauthenticated remote code execution and memory disclosure, and that frontier AI…
Safety and ethicsOpenAI leads coalition to fix critical PHP flaws found with GPT-5.6 Sol
OpenAI says it led a coalition of maintainers, researchers and security providers over the past two months to address critical vulnerabilities in PHP, the open-source…
Critical PHP flaws allow remote code execution; DigitalOcean urges patching
Two critical remote code execution vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were publicly disclosed on October 21, 2026. DigitalOcean says…
php2shell: Two Critical PHP RCE Bugs Patched, Finding Every Runtime Is Hard
PHP has released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two unauthenticated remote code execution bugs, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4 9.2.…