AI found a critical PHP flaw. The bigger failure began in 2024.
Did one of your favorite websites go dark on Wednesday? Some did, as operators took services offline while they waited The post AI found a critical PHP flaw. The bigger failure began in 2024. appeared first on The New Stack .
A critical PHP flaw was discovered, causing some websites to go offline temporarily as operators worked on fixes. PHP, which powers roughly 70% of websites, is particularly vulnerable due to its widespread use. The flaw, CVE-2026-109618 and CVE-2026-109619, led to a PHP security emergency known as PHP2Shell. The release of fixes by PHP maintainers and distributors was delayed by a dispute over coordinated disclosure, raising concerns about the effectiveness of the embargo on patches.
Written by urgent.news from The New Stack's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- AI helps uncover critical PHP flaw threatening 70pc of internet siliconrepublic.com
